Microsoft Windows Server, version 1909 (Server Core installation)

Name: Microsoft Windows Server, version 1909 (Server Core installation)
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical540high375medium77low

updated 2026-10-27

vulnerabilities (1,108)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0796US	critical10.0OT critical	99.8% (100th)	KEV	no fix	2020-03-12	≤ unspecified
CVE-2020-1472US	high9.3OT critical	99.4% (100th)	KEV	publication	2020-08-17	10.0.0 → publication
CVE-2020-1350US	critical10.0OT critical	96.7% (100th)	KEV	no fix	2020-07-14	≤ unspecified
CVE-2020-0601US	high8.1OT critical	89.1% (100th)	KEV	no fix	2020-01-14	≤ unspecified
CVE-2021-1732US	medium4.6OT critical	78.4% (100th)	KEV	publication	2021-02-25	10.0.0 → publication
CVE-2020-1020US	high8.8OT critical	65.0% (99th)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2020-1054US	high7.0OT critical	53.9% (99th)	KEV	no fix	2020-05-21	≤ unspecified
CVE-2020-0787US	high7.8OT critical	42.5% (99th)	KEV	no fix	2020-03-12	≤ unspecified
CVE-2021-28310US	medium4.6OT critical	8.40% (95th)	KEV	publication	2021-04-13	10.0.0 → publication
CVE-2020-0683US	high7.8OT critical	7.61% (95th)	KEV	no fix	2020-02-11	≤ unspecified
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	publication	2020-11-11	10.0.0 → publication
CVE-2020-0938US	high7.8OT critical	69.0% (99th)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2020-1464US	low2.1OT critical	38.9% (99th)	KEV	publication	2020-08-17	10.0.0 → publication
CVE-2020-0986US	high7.8OT critical	16.4% (97th)	KEV	no fix	2020-06-09	≤ unspecified
CVE-2020-1027US	high7.8OT critical	4.72% (92nd)	KEV	no fix	2020-04-15	≤ unspecified
CVE-2020-0638US	high7.8OT critical	2.37% (84th)	KEV	no fix	2020-01-14	≤ unspecified
CVE-2021-24086US	medium5.0	59.0% (99th)	Exploit	publication	2021-02-25	10.0.0 → publication
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2020-1301US	high8.8	43.8% (99th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2021-28476US	medium6.5	39.2% (99th)	Exploit	10.0.18363.1556	2021-05-11	10.0.0 → 10.0.18363.1556
CVE-2020-1313US	high7.8	39.0% (99th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2020-0668US	high7.8	25.9% (98th)	Exploit	no fix	2020-02-11	≤ unspecified
CVE-2020-1048US	high7.8	16.5% (97th)	Exploit	no fix	2020-05-21	≤ unspecified
CVE-2020-1337US	high7.2	14.2% (97th)	Exploit	publication	2020-08-17	10.0.0 → publication
CVE-2020-17136US	medium4.6	13.8% (97th)	Exploit	publication	2020-12-10	10.0.0 → publication
CVE-2020-16899US	high7.8	13.5% (96th)	Exploit	publication	2020-10-16	10.0.0 → publication
CVE-2020-16898US	medium5.8	10.9% (96th)	Exploit	publication	2020-10-16	10.0.0 → publication
CVE-2020-1206US	high7.5	10.5% (96th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2021-1678US	medium5.0	10.0% (96th)	Exploit	publication	2021-01-12	10.0.0 → publication
CVE-2020-0910US	high8.4	9.25% (95th)	Exploit	no fix	2020-04-15	≤ unspecified
CVE-2020-1283US	medium6.5	8.82% (95th)	Exploit	no fix	2020-06-09	≤ unspecified
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2021-28312US	medium4.3	6.60% (94th)	Exploit	publication	2021-04-13	10.0.0 → publication
CVE-2019-1476US	high7.8	5.09% (92nd)	Exploit	no fix	2019-12-10	≤ unspecified
CVE-2026-50507US	—OT elevated	5.02% (92nd)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2020-1034US	high7.2	4.85% (92nd)	Exploit	publication	2020-09-11	10.0.0 → publication
CVE-2020-0665US	high8.1	4.38% (91st)	Exploit	no fix	2020-02-11	≤ unspecified
CVE-2020-0728US	medium5.5	3.73% (90th)	Exploit	no fix	2020-02-11	≤ unspecified
CVE-2021-26415US	medium4.6	3.57% (89th)	Exploit	publication	2021-04-13	10.0.0 → publication
CVE-2021-26868US	medium4.6	3.08% (88th)	Exploit	publication	2021-03-11	10.0.0 → publication
CVE-2021-1656US	low2.1	3.01% (87th)	Exploit	publication	2021-01-12	10.0.0 → publication
CVE-2020-0890US	medium4.9	2.84% (87th)	Exploit	publication	2020-09-11	10.0.0 → publication
CVE-2021-24084US	medium4.9	2.74% (86th)	Exploit	publication	2021-02-25	10.0.0 → publication
CVE-2020-1015US	high7.8	2.61% (85th)	Exploit	no fix	2020-04-15	≤ unspecified
CVE-2020-1362US	high7.8	2.49% (85th)	Exploit	no fix	2020-07-14	≤ unspecified
CVE-2020-16939US	medium4.6	2.42% (84th)	Exploit	publication	2020-10-16	10.0.0 → publication
CVE-2020-0753US	high7.8	2.31% (83rd)	Exploit	no fix	2020-02-11	≤ unspecified
CVE-2020-0887US	high7.8	2.24% (83rd)	Exploit	no fix	2020-03-12	≤ unspecified
CVE-2021-1699US	low2.1	2.14% (82nd)	Exploit	publication	2021-01-12	10.0.0 → publication
CVE-2021-26882US	medium4.6	2.11% (82nd)	Exploit	publication	2021-03-11	10.0.0 → publication

showing 50 of 1,108

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management376 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer224 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor138 CVEs
CWE-264CWE-264107 CVEs
CWE-20Improper Input Validation90 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')50 CVEs
CWE-416Use After Free49 CVEs
CWE-125Out-of-bounds Read47 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)989 CVEs
NLNCSC-NL (CSAF)119 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan