Vulnerabilities > Microsoft > Windows Server 2022 > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-04-09 | CVE-2024-29052 | Improper Privilege Management vulnerability in Microsoft products Windows Storage Elevation of Privilege Vulnerability | 7.8 |
| 2024-04-09 | CVE-2024-29061 | Out-of-bounds Write vulnerability in Microsoft products Secure Boot Security Feature Bypass Vulnerability | 7.8 |
| 2024-04-09 | CVE-2024-29062 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Microsoft products Secure Boot Security Feature Bypass Vulnerability | 7.1 |
| 2024-03-12 | CVE-2024-21407 | Unspecified vulnerability in Microsoft products Windows Hyper-V Remote Code Execution Vulnerability | 8.1 |
| 2024-03-12 | CVE-2024-26169 | Unspecified vulnerability in Microsoft products Windows Error Reporting Service Elevation of Privilege Vulnerability | 7.8 |
| 2024-02-14 | CVE-2023-50387 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. | 7.5 |
| 2024-02-13 | CVE-2024-21420 | Unspecified vulnerability in Microsoft products Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
| 2024-02-13 | CVE-2024-21338 | Unspecified vulnerability in Microsoft products Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
| 2024-02-13 | CVE-2024-21343 | Unspecified vulnerability in Microsoft products Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
| 2024-02-13 | CVE-2024-21347 | Unspecified vulnerability in Microsoft products Microsoft ODBC Driver Remote Code Execution Vulnerability | 7.5 |