[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXyXOA5EzZGZjyHcV0-TKicUueYoNAdmfuDS7Q53TxN0":3,"g5a-family:microsoft\u002Fwindows_server_2019":608,"g5a-ex:microsoft\u002Fwindows_server_2019@*":609},{"success":4,"data":5},true,{"product":6,"versions":131,"topVulnerabilitiesByEpss":188,"kevVulnerabilities":244,"seoMetadata":586,"meta":605},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":130},"microsoft","windows_server_2019",56,4111,160,"2025-10-14",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,125,128],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.1999",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2061",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2114",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2183",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2237",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2300",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2366",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2452",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2565",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2803",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.2928",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3046",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3165",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3287",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3406",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3532",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3650",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3770",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.3887",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4010",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4131",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4252",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4499",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4645",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4737",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4851",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.4974",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5122",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5329",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5458",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5576",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5696",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5820",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.5936",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6054",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6189",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6293",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6414",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6532",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6659",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.6893",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7009",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7136",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7314",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7434",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7558",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7678",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7783",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7792",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7919",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.7922",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.8146",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17763.8276",{"version":123,"cve_count":124,"kev_count":16,"has_kev":17},"1803",3,{"version":126,"cve_count":127,"kev_count":16,"has_kev":17},"1903",15,{"version":129,"cve_count":127,"kev_count":16,"has_kev":17},"1909","Windows Server 2019 by Microsoft is a technology product with 56 tracked versions and 4111 known security vulnerabilities including 160 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":124,"kev_count":16,"has_kev":17},{"version":126,"cve_count":127,"kev_count":16,"has_kev":17},{"version":129,"cve_count":127,"kev_count":16,"has_kev":17},[189,197,203,209,215,220,224,228,233,239],{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":4,"epssScore":196},"CVE-2020-0646","A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.","2020-01-14",9.8,"v3.1","Critical",0.99222,{"cveId":198,"description":199,"publishedDate":192,"cvssScore":200,"cvssVersion":194,"severity":201,"isKev":4,"epssScore":202},"CVE-2020-0601","A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",8.1,"High",0.89078,{"cveId":204,"description":205,"publishedDate":206,"cvssScore":207,"cvssVersion":194,"severity":201,"isKev":4,"epssScore":208},"CVE-2020-0674","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.","2020-02-11",7.5,0.86863,{"cveId":210,"description":211,"publishedDate":212,"cvssScore":207,"cvssVersion":213,"severity":201,"isKev":17,"epssScore":214},"CVE-2019-0539","A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka \"Chakra Scripting Engine Memory Corruption Vulnerability.\" This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.","2019-01-08","v3.0",0.82902,{"cveId":216,"description":217,"publishedDate":218,"cvssScore":207,"cvssVersion":194,"severity":201,"isKev":4,"epssScore":219},"CVE-2019-0752","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","2019-04-09",0.81679,{"cveId":221,"description":222,"publishedDate":212,"cvssScore":207,"cvssVersion":213,"severity":201,"isKev":17,"epssScore":223},"CVE-2019-0567","A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka \"Chakra Scripting Engine Memory Corruption Vulnerability.\" This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.",0.80126,{"cveId":225,"description":226,"publishedDate":192,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":17,"epssScore":227},"CVE-2020-0609","A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.",0.77679,{"cveId":229,"description":230,"publishedDate":231,"cvssScore":207,"cvssVersion":194,"severity":201,"isKev":4,"epssScore":232},"CVE-2019-1429","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.","2019-11-12",0.7729,{"cveId":234,"description":235,"publishedDate":236,"cvssScore":237,"cvssVersion":194,"severity":201,"isKev":17,"epssScore":238},"CVE-2019-1358","A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.","2019-10-10",7.8,0.75933,{"cveId":240,"description":241,"publishedDate":242,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":17,"epssScore":243},"CVE-2019-1181","A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.\nThe update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.\n","2019-08-14",0.7575,[245,253,260,269,276,285,291,297,306,313,319,326,332,338,344,350,359,363,370,377,383,389,395,403,412,418,426,434,440,447,453,460,467,473,479,485,492,499,504,509,515,520,525,534,541,547,555,564,571,580],{"cveId":246,"description":247,"publishedDate":248,"cvssScore":237,"severity":201,"isKev":4,"epssScore":249,"cisaVulnName":250,"cisaDateAdded":248,"cisaShortDescription":251,"cisaRequiredAction":252},"CVE-2026-85880","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","2026-09-08",0.00387,"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":254,"description":255,"publishedDate":256,"cvssScore":237,"severity":201,"isKev":4,"epssScore":257,"cisaVulnName":258,"cisaDateAdded":256,"cisaShortDescription":259,"cisaRequiredAction":252},"CVE-2026-56155","Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.","2026-07-14",0.00346,"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability","Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":261,"description":262,"publishedDate":263,"cvssScore":237,"severity":201,"isKev":4,"epssScore":264,"cisaVulnName":265,"cisaDateAdded":266,"cisaShortDescription":267,"cisaRequiredAction":268},"CVE-2023-36424","Windows Common Log File System Driver Elevation of Privilege Vulnerability","2023-11-14",0.12087,"Microsoft Windows Out-of-Bounds Read Vulnerability","2026-04-13","Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":270,"description":271,"publishedDate":12,"cvssScore":193,"severity":195,"isKev":4,"epssScore":272,"cisaVulnName":273,"cisaDateAdded":274,"cisaShortDescription":275,"cisaRequiredAction":268},"CVE-2025-59287","Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.",0.9998,"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","2025-10-24","Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.",{"cveId":277,"description":278,"publishedDate":279,"cvssScore":280,"severity":201,"isKev":4,"epssScore":281,"cisaVulnName":282,"cisaDateAdded":283,"cisaShortDescription":284,"cisaRequiredAction":268},"CVE-2025-33073","Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.","2025-06-10",8.8,0.82699,"Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.",{"cveId":286,"description":287,"publishedDate":12,"cvssScore":237,"severity":201,"isKev":4,"epssScore":288,"cisaVulnName":289,"cisaDateAdded":12,"cisaShortDescription":290,"cisaRequiredAction":268},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"cveId":292,"description":293,"publishedDate":12,"cvssScore":237,"severity":201,"isKev":4,"epssScore":294,"cisaVulnName":295,"cisaDateAdded":12,"cisaShortDescription":296,"cisaRequiredAction":268},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",0.06369,"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.",{"cveId":298,"description":299,"publishedDate":300,"cvssScore":301,"severity":302,"isKev":4,"epssScore":303,"cisaVulnName":304,"cisaDateAdded":12,"cisaShortDescription":305,"cisaRequiredAction":268},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,"Medium",0.04927,"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":307,"description":262,"publishedDate":308,"cvssScore":237,"severity":201,"isKev":4,"epssScore":309,"cisaVulnName":310,"cisaDateAdded":311,"cisaShortDescription":312,"cisaRequiredAction":268},"CVE-2021-43226","2021-12-15",0.03275,"Microsoft Windows Privilege Escalation Vulnerability","2025-10-06","Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.",{"cveId":314,"description":315,"publishedDate":279,"cvssScore":280,"severity":201,"isKev":4,"epssScore":316,"cisaVulnName":317,"cisaDateAdded":279,"cisaShortDescription":318,"cisaRequiredAction":268},"CVE-2025-33053","External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.",0.87015,"Microsoft Windows External Control of File Name or Path Vulnerability","Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.",{"cveId":320,"description":321,"publishedDate":322,"cvssScore":207,"severity":201,"isKev":4,"epssScore":323,"cisaVulnName":324,"cisaDateAdded":322,"cisaShortDescription":325,"cisaRequiredAction":268},"CVE-2025-30397","Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.","2025-05-13",0.27263,"Microsoft Windows Scripting Engine Type Confusion Vulnerability","Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.",{"cveId":327,"description":328,"publishedDate":322,"cvssScore":237,"severity":201,"isKev":4,"epssScore":329,"cisaVulnName":330,"cisaDateAdded":322,"cisaShortDescription":331,"cisaRequiredAction":268},"CVE-2025-32706","Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.02333,"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":333,"description":334,"publishedDate":322,"cvssScore":237,"severity":201,"isKev":4,"epssScore":335,"cisaVulnName":336,"cisaDateAdded":322,"cisaShortDescription":337,"cisaRequiredAction":268},"CVE-2025-32701","Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.01416,"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":339,"description":340,"publishedDate":322,"cvssScore":237,"severity":201,"isKev":4,"epssScore":341,"cisaVulnName":342,"cisaDateAdded":322,"cisaShortDescription":343,"cisaRequiredAction":268},"CVE-2025-30400","Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.",0.01917,"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":345,"description":346,"publishedDate":322,"cvssScore":237,"severity":201,"isKev":4,"epssScore":347,"cisaVulnName":348,"cisaDateAdded":322,"cisaShortDescription":349,"cisaRequiredAction":268},"CVE-2025-32709","Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",0.01818,"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.",{"cveId":351,"description":352,"publishedDate":353,"cvssScore":354,"severity":302,"isKev":4,"epssScore":355,"cisaVulnName":356,"cisaDateAdded":357,"cisaShortDescription":358,"cisaRequiredAction":268},"CVE-2025-24054","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11",6.5,0.6227,"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.",{"cveId":360,"description":334,"publishedDate":361,"cvssScore":237,"severity":201,"isKev":4,"epssScore":362,"cisaVulnName":336,"cisaDateAdded":361,"cisaShortDescription":337,"cisaRequiredAction":268},"CVE-2025-29824","2025-04-08",0.19254,{"cveId":364,"description":365,"publishedDate":353,"cvssScore":366,"severity":302,"isKev":4,"epssScore":367,"cisaVulnName":368,"cisaDateAdded":353,"cisaShortDescription":369,"cisaRequiredAction":268},"CVE-2025-24991","Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.",5.5,0.02018,"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.",{"cveId":371,"description":372,"publishedDate":353,"cvssScore":373,"severity":201,"isKev":4,"epssScore":374,"cisaVulnName":375,"cisaDateAdded":353,"cisaShortDescription":376,"cisaRequiredAction":268},"CVE-2025-26633","Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.",7,0.30391,"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.",{"cveId":378,"description":379,"publishedDate":353,"cvssScore":237,"severity":201,"isKev":4,"epssScore":380,"cisaVulnName":381,"cisaDateAdded":353,"cisaShortDescription":382,"cisaRequiredAction":268},"CVE-2025-24985","Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.",0.0389,"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":384,"description":385,"publishedDate":353,"cvssScore":301,"severity":302,"isKev":4,"epssScore":386,"cisaVulnName":387,"cisaDateAdded":353,"cisaShortDescription":388,"cisaRequiredAction":268},"CVE-2025-24984","Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.",0.01994,"Microsoft Windows NTFS Information Disclosure Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.",{"cveId":390,"description":391,"publishedDate":353,"cvssScore":237,"severity":201,"isKev":4,"epssScore":392,"cisaVulnName":393,"cisaDateAdded":353,"cisaShortDescription":394,"cisaRequiredAction":268},"CVE-2025-24993","Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.",0.02216,"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":396,"description":397,"publishedDate":398,"cvssScore":237,"severity":201,"isKev":4,"epssScore":399,"cisaVulnName":400,"cisaDateAdded":401,"cisaShortDescription":402,"cisaRequiredAction":268},"CVE-2018-8639","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.","2018-12-12",0.22179,"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","2025-03-03","Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.",{"cveId":404,"description":405,"publishedDate":406,"cvssScore":407,"severity":201,"isKev":4,"epssScore":408,"cisaVulnName":409,"cisaDateAdded":406,"cisaShortDescription":410,"cisaRequiredAction":411},"CVE-2025-21391","Windows Storage Elevation of Privilege Vulnerability","2025-02-11",7.1,0.02284,"Microsoft Windows Storage Link Following Vulnerability","Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":413,"description":414,"publishedDate":406,"cvssScore":237,"severity":201,"isKev":4,"epssScore":415,"cisaVulnName":416,"cisaDateAdded":406,"cisaShortDescription":417,"cisaRequiredAction":411},"CVE-2025-21418","Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability",0.02132,"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":419,"description":420,"publishedDate":421,"cvssScore":207,"severity":201,"isKev":4,"epssScore":422,"cisaVulnName":423,"cisaDateAdded":424,"cisaShortDescription":425,"cisaRequiredAction":411},"CVE-2024-29059",".NET Framework Information Disclosure Vulnerability","2024-03-23",0.98624,"Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.",{"cveId":427,"description":428,"publishedDate":429,"cvssScore":237,"severity":201,"isKev":4,"epssScore":430,"cisaVulnName":431,"cisaDateAdded":432,"cisaShortDescription":433,"cisaRequiredAction":411},"CVE-2024-35250","Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","2024-06-11",0.25222,"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.",{"cveId":435,"description":262,"publishedDate":436,"cvssScore":237,"severity":201,"isKev":4,"epssScore":437,"cisaVulnName":330,"cisaDateAdded":438,"cisaShortDescription":439,"cisaRequiredAction":411},"CVE-2024-49138","2024-12-12",0.26215,"2024-12-10","Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",{"cveId":441,"description":442,"publishedDate":443,"cvssScore":354,"severity":302,"isKev":4,"epssScore":444,"cisaVulnName":445,"cisaDateAdded":443,"cisaShortDescription":446,"cisaRequiredAction":411},"CVE-2024-43451","NTLM Hash Disclosure Spoofing Vulnerability","2024-11-12",0.84266,"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.",{"cveId":448,"description":449,"publishedDate":443,"cvssScore":280,"severity":201,"isKev":4,"epssScore":450,"cisaVulnName":451,"cisaDateAdded":443,"cisaShortDescription":452,"cisaRequiredAction":411},"CVE-2024-49039","Windows Task Scheduler Elevation of Privilege Vulnerability",0.14179,"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.",{"cveId":454,"description":455,"publishedDate":429,"cvssScore":373,"severity":201,"isKev":4,"epssScore":456,"cisaVulnName":457,"cisaDateAdded":458,"cisaShortDescription":459,"cisaRequiredAction":411},"CVE-2024-30088","Windows Kernel Elevation of Privilege Vulnerability",0.68202,"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","2024-10-15","Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ",{"cveId":461,"description":462,"publishedDate":463,"cvssScore":237,"severity":201,"isKev":4,"epssScore":464,"cisaVulnName":465,"cisaDateAdded":463,"cisaShortDescription":466,"cisaRequiredAction":411},"CVE-2024-43572","Microsoft Management Console Remote Code Execution Vulnerability","2024-10-08",0.66695,"Microsoft Windows Management Console Remote Code Execution Vulnerability","Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.",{"cveId":468,"description":469,"publishedDate":463,"cvssScore":200,"severity":201,"isKev":4,"epssScore":470,"cisaVulnName":471,"cisaDateAdded":463,"cisaShortDescription":472,"cisaRequiredAction":411},"CVE-2024-43573","Windows MSHTML Platform Spoofing Vulnerability",0.46109,"Microsoft Windows MSHTML Platform Spoofing Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.",{"cveId":474,"description":469,"publishedDate":475,"cvssScore":280,"severity":201,"isKev":4,"epssScore":476,"cisaVulnName":471,"cisaDateAdded":477,"cisaShortDescription":478,"cisaRequiredAction":411},"CVE-2024-43461","2024-09-10",0.54486,"2024-09-16","Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.",{"cveId":480,"description":481,"publishedDate":475,"cvssScore":237,"severity":201,"isKev":4,"epssScore":482,"cisaVulnName":483,"cisaDateAdded":475,"cisaShortDescription":484,"cisaRequiredAction":411},"CVE-2024-38014","Windows Installer Elevation of Privilege Vulnerability",0.06263,"Microsoft Windows Installer Improper Privilege Management Vulnerability","Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":486,"description":487,"publishedDate":475,"cvssScore":488,"severity":302,"isKev":4,"epssScore":489,"cisaVulnName":490,"cisaDateAdded":475,"cisaShortDescription":491,"cisaRequiredAction":411},"CVE-2024-38217","Windows Mark of the Web Security Feature Bypass Vulnerability",5.4,0.10026,"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.",{"cveId":493,"description":494,"publishedDate":495,"cvssScore":237,"severity":201,"isKev":4,"epssScore":496,"cisaVulnName":497,"cisaDateAdded":495,"cisaShortDescription":498,"cisaRequiredAction":411},"CVE-2024-38107","Windows Power Dependency Coordinator Elevation of Privilege Vulnerability","2024-08-13",0.01635,"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.",{"cveId":500,"description":414,"publishedDate":495,"cvssScore":237,"severity":201,"isKev":4,"epssScore":501,"cisaVulnName":502,"cisaDateAdded":495,"cisaShortDescription":503,"cisaRequiredAction":411},"CVE-2024-38193",0.28739,"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":505,"description":455,"publishedDate":495,"cvssScore":373,"severity":201,"isKev":4,"epssScore":506,"cisaVulnName":507,"cisaDateAdded":495,"cisaShortDescription":508,"cisaRequiredAction":411},"CVE-2024-38106",0.06337,"Microsoft Windows Kernel Privilege Escalation Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.",{"cveId":510,"description":511,"publishedDate":495,"cvssScore":207,"severity":201,"isKev":4,"epssScore":512,"cisaVulnName":513,"cisaDateAdded":495,"cisaShortDescription":514,"cisaRequiredAction":411},"CVE-2024-38178","Scripting Engine Memory Corruption Vulnerability",0.4138,"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.",{"cveId":516,"description":487,"publishedDate":495,"cvssScore":354,"severity":302,"isKev":4,"epssScore":517,"cisaVulnName":518,"cisaDateAdded":495,"cisaShortDescription":519,"cisaRequiredAction":411},"CVE-2024-38213",0.13626,"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.",{"cveId":521,"description":469,"publishedDate":522,"cvssScore":207,"severity":201,"isKev":4,"epssScore":523,"cisaVulnName":471,"cisaDateAdded":522,"cisaShortDescription":524,"cisaRequiredAction":411},"CVE-2024-38112","2024-07-09",0.84225,"Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.",{"cveId":526,"description":527,"publishedDate":528,"cvssScore":237,"severity":201,"isKev":4,"epssScore":529,"cisaVulnName":530,"cisaDateAdded":531,"cisaShortDescription":532,"cisaRequiredAction":533},"CVE-2024-26169","Windows Error Reporting Service Elevation of Privilege Vulnerability","2024-03-12",0.03981,"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","2024-06-13","Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":535,"description":536,"publishedDate":537,"cvssScore":237,"severity":201,"isKev":4,"epssScore":538,"cisaVulnName":539,"cisaDateAdded":537,"cisaShortDescription":540,"cisaRequiredAction":411},"CVE-2024-30051","Windows DWM Core Library Elevation of Privilege Vulnerability","2024-05-14",0.05687," Microsoft DWM Core Library Privilege Escalation Vulnerability","Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.",{"cveId":542,"description":543,"publishedDate":537,"cvssScore":280,"severity":201,"isKev":4,"epssScore":544,"cisaVulnName":545,"cisaDateAdded":537,"cisaShortDescription":546,"cisaRequiredAction":411},"CVE-2024-30040","Windows MSHTML Platform Security Feature Bypass Vulnerability",0.03939,"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":548,"description":549,"publishedDate":550,"cvssScore":280,"severity":201,"isKev":4,"epssScore":551,"cisaVulnName":552,"cisaDateAdded":553,"cisaShortDescription":554,"cisaRequiredAction":411},"CVE-2024-29988","SmartScreen Prompt Security Feature Bypass Vulnerability","2024-04-09",0.45151,"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","2024-04-30","Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.",{"cveId":556,"description":557,"publishedDate":558,"cvssScore":237,"severity":201,"isKev":4,"epssScore":559,"cisaVulnName":560,"cisaDateAdded":561,"cisaShortDescription":562,"cisaRequiredAction":563},"CVE-2022-38028","Windows Print Spooler Elevation of Privilege Vulnerability","2022-10-11",0.14949,"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","2024-04-23","Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.  ",{"cveId":565,"description":455,"publishedDate":566,"cvssScore":237,"severity":201,"isKev":4,"epssScore":567,"cisaVulnName":568,"cisaDateAdded":569,"cisaShortDescription":570,"cisaRequiredAction":411},"CVE-2024-21338","2024-02-13",0.5981,"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","2024-03-04","Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.",{"cveId":572,"description":573,"publishedDate":574,"cvssScore":575,"severity":201,"isKev":4,"epssScore":576,"cisaVulnName":577,"cisaDateAdded":578,"cisaShortDescription":579,"cisaRequiredAction":411},"CVE-2023-29360","Microsoft Streaming Service Elevation of Privilege Vulnerability","2023-06-14",8.4,0.2162,"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","2024-02-29","Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":581,"description":582,"publishedDate":566,"cvssScore":200,"severity":201,"isKev":4,"epssScore":583,"cisaVulnName":584,"cisaDateAdded":566,"cisaShortDescription":585,"cisaRequiredAction":411},"CVE-2024-21412","Internet Shortcut Files Security Feature Bypass Vulnerability",0.9941,"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.",{"title":587,"metaDescription":588,"keywords":589,"structuredData":590},"Windows Server 2019 by Microsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Windows Server 2019 by Microsoft covering 56 versions with 4111 tracked vulnerabilities including 1 critical and 42 high-severity issues and 160 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows Server 2019 vulnerabilities, Windows Server 2019 security, Windows Server 2019 CVE, Microsoft Windows Server 2019, Windows Server 2019 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows Server 2019 KEV, Windows Server 2019 exploited vulnerabilities",{"@context":591,"@type":592,"name":593,"description":588,"url":594,"manufacturer":595,"applicationCategory":599,"softwareVersion":600,"mainEntity":601},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows Server 2019","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_server_2019",{"@type":596,"name":597,"url":598},"Organization","Microsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fmicrosoft","Security Software","56 versions tracked",{"@type":602,"name":603,"description":604,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows Server 2019 Security Vulnerabilities","Security vulnerabilities affecting Windows Server 2019 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":606,"apiVersion":607},"2026-10-28T14:04:28.216Z","3.0",[],{"rows":610,"total":743,"capped":4,"failed":16},[611,616,621,625,630,635,640,644,648,652,656,661,665,669,673,677,682,687,691,695,699,703,707,711,716,720,724,729,734,739],{"cveId":246,"name":250,"severity":201,"cvss":237,"added":248,"epss":249,"published":612,"ranges":613,"checked":4,"hits":615,"covers":17},"2026-09-08T18:21:14.087",[614],"before 10.0.17763.9245",[],{"cveId":254,"name":258,"severity":201,"cvss":237,"added":256,"epss":257,"published":617,"ranges":618,"checked":4,"hits":620,"covers":17},"2026-07-14T17:17:09.763",[619],"before 10.0.17763.9020",[],{"cveId":261,"name":265,"severity":201,"cvss":237,"added":266,"epss":264,"published":622,"ranges":623,"checked":4,"hits":624,"covers":17},"2023-11-14T18:15:45.99",[],[],{"cveId":270,"name":273,"severity":195,"cvss":193,"added":274,"epss":272,"published":626,"ranges":627,"checked":4,"hits":629,"covers":17},"2025-10-14T17:16:11.67",[628],"before 10.0.17763.7922",[],{"cveId":277,"name":282,"severity":201,"cvss":280,"added":283,"epss":281,"published":631,"ranges":632,"checked":4,"hits":634,"covers":17},"2025-06-10T17:23:02.967",[633],"before 10.0.17763.7434",[],{"cveId":286,"name":289,"severity":201,"cvss":237,"added":12,"epss":288,"published":636,"ranges":637,"checked":4,"hits":639,"covers":17},"2025-10-14T17:16:04.173",[638],"before 10.0.17763.7919",[],{"cveId":292,"name":295,"severity":201,"cvss":237,"added":12,"epss":294,"published":641,"ranges":642,"checked":4,"hits":643,"covers":17},"2025-10-14T17:15:39.193",[638],[],{"cveId":298,"name":304,"severity":302,"cvss":301,"added":12,"epss":303,"published":645,"ranges":646,"checked":4,"hits":647,"covers":17},"2025-06-05T14:15:32.263",[638],[],{"cveId":307,"name":310,"severity":201,"cvss":237,"added":311,"epss":309,"published":649,"ranges":650,"checked":4,"hits":651,"covers":17},"2021-12-15T15:15:09.737",[],[],{"cveId":314,"name":317,"severity":201,"cvss":280,"added":279,"epss":316,"published":653,"ranges":654,"checked":4,"hits":655,"covers":17},"2025-06-10T17:22:18.853",[633],[],{"cveId":320,"name":324,"severity":201,"cvss":207,"added":322,"epss":323,"published":657,"ranges":658,"checked":4,"hits":660,"covers":17},"2025-05-13T17:16:02.37",[659],"before 10.0.17763.7314",[],{"cveId":327,"name":330,"severity":201,"cvss":237,"added":322,"epss":329,"published":662,"ranges":663,"checked":4,"hits":664,"covers":17},"2025-05-13T17:16:03.607",[659],[],{"cveId":333,"name":336,"severity":201,"cvss":237,"added":322,"epss":335,"published":666,"ranges":667,"checked":4,"hits":668,"covers":17},"2025-05-13T17:16:02.71",[659],[],{"cveId":339,"name":342,"severity":201,"cvss":237,"added":322,"epss":341,"published":670,"ranges":671,"checked":4,"hits":672,"covers":17},"2025-05-13T17:16:02.537",[659],[],{"cveId":345,"name":348,"severity":201,"cvss":237,"added":322,"epss":347,"published":674,"ranges":675,"checked":4,"hits":676,"covers":17},"2025-05-13T17:16:04.02",[659],[],{"cveId":351,"name":356,"severity":302,"cvss":354,"added":357,"epss":355,"published":678,"ranges":679,"checked":4,"hits":681,"covers":17},"2025-03-11T17:16:27.66",[680],"before 10.0.17763.7009",[],{"cveId":360,"name":336,"severity":201,"cvss":237,"added":361,"epss":362,"published":683,"ranges":684,"checked":4,"hits":686,"covers":17},"2025-04-08T18:16:08.34",[685],"before 10.0.17763.7136",[],{"cveId":364,"name":368,"severity":302,"cvss":366,"added":353,"epss":367,"published":688,"ranges":689,"checked":4,"hits":690,"covers":17},"2025-03-11T17:16:35.297",[],[],{"cveId":371,"name":375,"severity":201,"cvss":373,"added":353,"epss":374,"published":692,"ranges":693,"checked":4,"hits":694,"covers":17},"2025-03-11T17:16:43.39",[],[],{"cveId":378,"name":381,"severity":201,"cvss":237,"added":353,"epss":380,"published":696,"ranges":697,"checked":4,"hits":698,"covers":17},"2025-03-11T17:16:34.303",[680],[],{"cveId":384,"name":387,"severity":302,"cvss":301,"added":353,"epss":386,"published":700,"ranges":701,"checked":4,"hits":702,"covers":17},"2025-03-11T17:16:34.09",[680],[],{"cveId":390,"name":393,"severity":201,"cvss":237,"added":353,"epss":392,"published":704,"ranges":705,"checked":4,"hits":706,"covers":17},"2025-03-11T17:16:35.797",[],[],{"cveId":396,"name":400,"severity":201,"cvss":237,"added":401,"epss":399,"published":708,"ranges":709,"checked":4,"hits":710,"covers":17},"2018-12-12T00:29:01.84",[],[],{"cveId":404,"name":409,"severity":201,"cvss":407,"added":406,"epss":408,"published":712,"ranges":713,"checked":4,"hits":715,"covers":17},"2025-02-11T18:15:37.723",[714],"before 10.0.17763.6893",[],{"cveId":413,"name":416,"severity":201,"cvss":237,"added":406,"epss":415,"published":717,"ranges":718,"checked":4,"hits":719,"covers":17},"2025-02-11T18:15:40.023",[714],[],{"cveId":419,"name":423,"severity":201,"cvss":207,"added":424,"epss":422,"published":721,"ranges":722,"checked":4,"hits":723,"covers":17},"2024-03-23T00:15:09.15",[],[],{"cveId":427,"name":431,"severity":201,"cvss":237,"added":432,"epss":430,"published":725,"ranges":726,"checked":4,"hits":728,"covers":17},"2024-06-11T17:16:02.65",[727],"before 10.0.17763.5936",[],{"cveId":435,"name":330,"severity":201,"cvss":237,"added":438,"epss":437,"published":730,"ranges":731,"checked":4,"hits":733,"covers":17},"2024-12-12T02:04:40.307",[732],"before 10.0.17763.6659",[],{"cveId":441,"name":445,"severity":302,"cvss":354,"added":443,"epss":444,"published":735,"ranges":736,"checked":4,"hits":738,"covers":17},"2024-11-12T18:15:22.483",[737],"before 10.0.17763.6532",[],{"cveId":448,"name":451,"severity":201,"cvss":280,"added":443,"epss":450,"published":740,"ranges":741,"checked":4,"hits":742,"covers":17},"2024-11-12T18:15:44.16",[737],[],50]