Microsoft Windows Server, version 1903 (Server Core installation)

Name: Microsoft Windows Server, version 1903 (Server Core installation)
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical670high336medium46low

updated 2026-10-27

vulnerabilities (1,174)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0796US	critical10.0OT critical	99.8% (100th)	KEV	no fix	2020-03-12	≤ unspecified
CVE-2020-1472US	high9.3OT critical	99.4% (100th)	KEV	publication	2020-08-17	10.0.0 → publication
CVE-2020-1350US	critical10.0OT critical	96.7% (100th)	KEV	no fix	2020-07-14	≤ unspecified
CVE-2020-0601US	high8.1OT critical	89.1% (100th)	KEV	no fix	2020-01-14	≤ unspecified
CVE-2020-1020US	high8.8OT critical	65.0% (99th)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2020-1054US	high7.0OT critical	53.9% (99th)	KEV	no fix	2020-05-21	≤ unspecified
CVE-2020-0787US	high7.8OT critical	42.5% (99th)	KEV	no fix	2020-03-12	≤ unspecified
CVE-2019-1405US	high7.8OT critical	30.2% (98th)	KEV	no fix	2019-11-12	≤ unspecified
CVE-2019-1215US	high7.8OT critical	19.3% (97th)	KEV	no fix	2019-09-11	≤ unspecified
CVE-2019-1322US	high7.8OT critical	18.8% (97th)	KEV	no fix	2019-10-10	≤ unspecified
CVE-2019-1253US	high7.8OT critical	11.6% (96th)	KEV	no fix	2019-09-11	≤ unspecified
CVE-2019-1388US	high7.8OT critical	8.59% (95th)	KEV	no fix	2019-11-12	≤ unspecified
CVE-2020-0683US	high7.8OT critical	7.61% (95th)	KEV	no fix	2020-02-11	≤ unspecified
CVE-2019-1064US	high7.8OT critical	6.89% (94th)	KEV	publication	2019-06-12	10.0.0 → publication
CVE-2019-1069US	high7.8OT critical	6.12% (93rd)	KEV	publication	2019-06-12	10.0.0 → publication
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	publication	2020-11-11	10.0.0 → publication
CVE-2019-0863US	high7.8OT critical	5.21% (92nd)	KEV	no fix	2019-05-16	≤ unspecified
CVE-2019-1315US	high7.8OT critical	3.48% (89th)	KEV	no fix	2019-10-10	≤ unspecified
CVE-2020-0938US	high7.8OT critical	69.0% (99th)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2020-1464US	low2.1OT critical	38.9% (99th)	KEV	publication	2020-08-17	10.0.0 → publication
CVE-2019-0903US	high8.8OT critical	21.7% (98th)	KEV	no fix	2019-05-16	≤ unspecified
CVE-2020-0986US	high7.8OT critical	16.4% (97th)	KEV	no fix	2020-06-09	≤ unspecified
CVE-2020-1027US	high7.8OT critical	4.72% (92nd)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2019-1385US	high7.8OT critical	3.60% (89th)	KEV	no fix	2019-11-12	≤ unspecified
CVE-2020-0638US	high7.8OT critical	2.37% (84th)	KEV	no fix	2020-01-14	≤ unspecified
CVE-2019-0880US	high7.8OT critical	2.31% (83rd)	KEV	no fix	2019-07-15	≤ unspecified
CVE-2019-1129US	high7.8OT critical	1.78% (78th)	KEV	no fix	2019-07-15	≤ unspecified
CVE-2019-1130US	high7.8OT critical	1.72% (77th)	KEV	no fix	2019-07-15	≤ unspecified
CVE-2019-1214US	high7.8OT critical	1.42% (73rd)	KEV	no fix	2019-09-11	≤ unspecified
CVE-2019-1184US	high7.2	70.2% (99th)	Exploit	publication	2019-08-14	10.0.0 → publication
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2019-0785US	critical9.8	49.6% (99th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1040US	medium4.3	48.0% (99th)	Exploit	publication	2019-06-12	10.0.0 → publication
CVE-2020-1301US	high8.8	43.8% (99th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2020-1313US	high7.8	39.0% (99th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2019-1150US	high9.3	26.2% (98th)	Exploit	publication	2019-08-14	10.0.0 → publication
CVE-2020-0668US	high7.8	25.9% (98th)	Exploit	no fix	2020-02-11	≤ unspecified
CVE-2019-1118US	high8.8	23.6% (98th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1117US	high8.8	23.6% (98th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1127US	high8.8	20.6% (98th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1124US	high8.8	18.4% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1128US	high8.8	16.9% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1123US	high8.8	16.9% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1122US	high8.8	16.9% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1121US	high8.8	16.9% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2019-1120US	high8.8	16.9% (97th)	Exploit	no fix	2019-07-15	≤ unspecified
CVE-2020-1048US	high7.8	16.5% (97th)	Exploit	no fix	2020-05-21	≤ unspecified
CVE-2019-1151US	high9.3	15.5% (97th)	Exploit	publication	2019-08-14	10.0.0 → publication
CVE-2019-1019US	medium6.0	15.1% (97th)	Exploit	publication	2019-06-12	10.0.0 → publication
CVE-2019-1347US	medium6.5	14.9% (97th)	Exploit	no fix	2019-10-10	≤ unspecified

showing 50 of 1,174

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management357 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer294 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor150 CVEs
CWE-264CWE-264117 CVEs
CWE-20Improper Input Validation103 CVEs
CWE-787Out-of-bounds Write57 CVEs
CWE-125Out-of-bounds Read51 CVEs
CWE-416Use After Free46 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)1,055 CVEs
NLNCSC-NL (CSAF)119 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan