Windows Server 2019

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

10critical247high373medium53low

updated 2026-10-28

vulnerabilities (2,296)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	10.0.17763.2029	2021-07-02	2 versions
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	10.0.17763.4737	2023-07-11	2 versions
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	10.0.17763.5458	2024-02-13	2 versions
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	10.0.17763.3046	2022-06-01	2 versions
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	10.0.17763.2183	2021-09-15	2 versions
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	10.0.17763.5122	2023-11-14	2 versions
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	10.0.17763.7434	2025-06-10	2 versions
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	10.0.17763.6532	2024-11-12	2 versions
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	10.0.17763.6054	2024-07-09	2 versions
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	10.0.17763.4252	2022-05-10	2 versions
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	10.0.17763.7434	2025-06-10	2 versions
CVE-2021-42287US	medium6.5OT critical	77.2% (100th)	KEV	10.0.17763.2300	2021-11-10	2 versions
CVE-2021-42278US	medium6.5OT critical	73.3% (99th)	KEV	10.0.17763.2300	2021-11-10	2 versions
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	10.0.17763.5936	2024-06-11	2 versions
CVE-2021-36942US	medium5.0OT critical	66.0% (99th)	KEV	10.0.17763.2114	2021-08-12	2 versions
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	10.0.17763.8389	2026-02-10	2 versions
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	10.0.17763.5458	2024-02-13	2 versions
CVE-2022-21882US	high7.8OT critical	59.2% (99th)	KEV	10.0.17763.2452	2022-01-11	2 versions
CVE-2022-21971US	high9.3OT critical	53.8% (99th)	KEV	10.0.17763.2565	2022-02-09	2 versions
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	10.0.17763.4252	2023-04-11	2 versions
CVE-2024-29988US	—OT critical	45.2% (99th)	KEV	10.0.17763.5696	2024-04-09	2 versions
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	10.0.17763.4645	2023-07-11	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	10.0.17763.2565	2022-02-09	2 versions
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	10.0.17763.3887	2023-01-10	2 versions
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	10.0.17763.6189	2024-08-13	2 versions
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	10.0.17763.3406	2022-09-13	2 versions
CVE-2023-36802US	—OT critical	27.9% (98th)	KEV	10.0.17763.4851	2023-09-12	2 versions
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	10.0.17763.7314	2025-05-13	2 versions
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	10.0.17763.6659	2024-12-12	2 versions
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	10.0.17763.5936	2024-06-11	2 versions
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	10.0.17763.4499	2023-06-14	2 versions
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	10.0.17763.7136	2025-04-08	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	10.0.17763.2565	2022-02-09	2 versions
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	10.0.17763.2803	2022-04-15	2 versions
CVE-2024-49039US	—OT critical	14.2% (97th)	KEV	10.0.17763.6532	2024-11-12	2 versions
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	10.0.17763.5122	2023-11-14	2 versions
CVE-2021-34486US	medium4.6OT critical	9.25% (95th)	KEV	10.0.17763.2114	2021-08-12	2 versions
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	10.0.17763.2803	2022-04-15	2 versions
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	10.0.17763.5820	2024-05-14	2 versions
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	10.0.17763.4010	2023-02-14	2 versions
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	10.0.17763.8027	2025-11-11	2 versions
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	10.0.17763.8389	2026-02-10	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	10.0.17763.2183	2021-09-15	2 versions
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	10.0.17763.5576	2024-03-12	2 versions
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	10.0.17763.8146	2025-12-09	2 versions
CVE-2025-30400US	—OT critical	1.92% (80th)	KEV	10.0.17763.7314	2025-05-13	2 versions
CVE-2025-32709US	—OT critical	1.82% (79th)	KEV	10.0.17763.7314	2025-05-13	2 versions
CVE-2023-28229US	—OT critical	1.67% (77th)	KEV	10.0.17763.4252	2023-04-11	2 versions
CVE-2023-24880US	—OT critical	78.0% (100th)	KEV	10.0.17763.4131	2023-03-14	2 versions
CVE-2022-44698US	—OT critical	76.3% (100th)	KEV	10.0.17763.3770	2022-12-13	2 versions

showing 50 of 2,296

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation434 CVEs
CWE-264CWE-264317 CVEs
CWE-122Heap-based Buffer Overflow248 CVEs
CWE-269Improper Privilege Management224 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')202 CVEs
CWE-416Use After Free202 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor191 CVEs
CWE-125Out-of-bounds Read171 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)2,296 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan