Windows Server 2019 CVEs and Security Vulnerabilities

CVE-2022-42973

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft Schneider-electric

Products

Windows 10 Windows 11 Windows 7 and 5 more

CVE-2023-28249

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 9 more

CVE-2023-28269

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 9 more

CVE-2023-28308

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28307

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28306

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 9 more

CVE-2023-28256

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28278

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28255

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28254

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2023-28253

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2023-28274

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 6.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 20h2 Windows 10 21h2 and 5 more

CVE-2023-28273

Windows Clip Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 6 more

CVE-2023-28250

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2023-28272

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2023-28271

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2023-28248

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 7 more

CVE-2023-28247

Windows Network File System Information Disclosure Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2012 Windows Server 2016 Windows Server 2019 and 1 more

Search vulnerabilities

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Clip Service Elevation of Privilege Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Network File System Information Disclosure Vulnerability