Vulnerabilities > Microsoft > Windows Server 2016 > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-1182 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
critical
9.8
2019-08-14 CVE-2019-1212 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets.
network
low complexity
microsoft CWE-787
critical
9.8
2019-08-14 CVE-2019-1222 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
critical
9.8
2019-08-14 CVE-2019-1226 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
critical
9.8
2019-07-15 CVE-2019-0785 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-787
critical
9.8
2019-05-16 CVE-2019-0725 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-787
critical
9.8
2019-04-09 CVE-2019-0786 Improper Input Validation vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.
network
low complexity
microsoft CWE-20
critical
9.8
2019-04-09 CVE-2019-0697 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-787
critical
9.8
2019-04-09 CVE-2019-0698 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-787
critical
9.8
2019-04-09 CVE-2019-0726 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-787
critical
9.8