Microsoft Windows Server 2004 vulnerabilities

CVE-2026-50508 High · 7.5 CWE-200 Jun 9, 2026

Windows NTLM Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2021-43226 High · 7.8 KEV Urgent · 70 Public exploit Ransomware Dec 15, 2021

Microsoft Windows Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-42287 High · 7.5 KEV Urgent · 72 Public exploit Ransomware Nov 9, 2021

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2021-42278 High · 7.5 KEV Urgent · 72 Public exploit Ransomware Nov 9, 2021

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2021-41379 Medium · 5.5 KEV High · 63 Ransomware CWE-59 Nov 9, 2021

Microsoft Windows Installer Privilege Escalation Vulnerability

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-41357 High · 7.8 KEV High · 52 Oct 12, 2021

Microsoft Win32k Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2021-40449 High · 7.8 KEV Urgent · 84 Public exploit Ransomware CWE-416 Oct 12, 2021

Microsoft Windows Win32k Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2021-40450 High · 7.8 KEV High · 52 Oct 12, 2021

Microsoft Win32k Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2021-40444 High · 8.8 KEV Urgent · 94 Public exploit Ransomware CWE-22 Sep 15, 2021

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments. Microsoft Defender for Endpoint alerts will be displayed as: “Suspicious Cpl File Execution”. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. Please see the Mitigations and Workaround sections for important information about steps you can take to protect your system from this vulnerability. UPDATE September 14, 2021: Microsoft has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. Please see the FAQ for important information about which updates are applicable to your system.

CVE-2021-36955 High · 7.8 KEV Urgent · 71 Public exploit Ransomware Sep 15, 2021

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-36942 High · 7.5 KEV Urgent · 81 Public exploit Ransomware Aug 12, 2021

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Windows LSA Spoofing Vulnerability

CVE-2021-36948 High · 7.8 KEV High · 56 Aug 12, 2021

Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

CVE-2021-34486 High · 7.8 KEV High · 61 Public exploit CWE-416 Aug 12, 2021

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-34484 High · 7.8 KEV High · 56 Aug 12, 2021

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-33771 High · 7.8 KEV High · 55 Jul 14, 2021

Microsoft Windows Kernel Privilege Escalation Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-31979 High · 7.8 KEV High · 55 CWE-119 Jul 14, 2021

Microsoft Windows Kernel Privilege Escalation Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-33739 High · 8.4 KEV High · 61 Public exploit Jun 8, 2021

Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2021-1675 High · 7.8 KEV Urgent · 84 Public exploit Ransomware Jun 8, 2021

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVE-2021-31201 Medium · 5.2 KEV High · 51 Jun 8, 2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31956 High · 7.8 KEV High · 62 Public exploit CWE-191 Jun 8, 2021

Microsoft Windows NTFS Privilege Escalation Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

CVE-2021-31199 Medium · 5.2 KEV High · 51 Jun 8, 2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31955 Medium · 5.5 KEV High · 59 Public exploit CWE-497 Jun 8, 2021

Microsoft Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

CVE-2021-31166 Critical · 9.8 KEV Urgent · 81 Public exploit CWE-416 May 11, 2021

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

CVE-2021-28310 High · 7.8 KEV High · 55 Public exploit CWE-787 Apr 13, 2021

Microsoft Win32k Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2021-1732 High · 7.8 KEV Urgent · 88 Public exploit Ransomware CWE-787 Feb 25, 2021

Microsoft Win32k Privilege Escalation Vulnerability

Windows Win32k Elevation of Privilege Vulnerability