Software Detail

Software Informaton Top

Operating Systems

Software Detail

Windows Server

Number Of NVD

5091

CRITICAL

122

HIGH

3461

MEDIUM

1438

LOW

URL	https://www.microsoft.com/
Explanation	Server products offered by Microsoft. For business, developer, and desktop operating system products, 10 years of support at the supported Service Pack level (with a minimum of 5 years of mainstream support, followed by a minimum of 5 years of extended support). You may need to deploy the latest updates to be eligible for support. For some products, the support organization may be less than 10 years. For consumer and multimedia products, five years of mainstream support at the supported Service Pack level. The above text is excerpted from Microsoft's Fixed Lifecycle Policy.
Tag	Microsoft 商用ライセンス有り

Add Information URL

No	Type	Name	URL
1			https://support.microsoft.com//lifecycle/search
2			https://www.microsoft.com/ja-jp/cloud-platform/windows-server
3			https://support.microsoft.com/ja-jp/hub/4095338/microsoft-lifecycle-policy
4			https://docs.microsoft.com/ja-jp/windows-server/get-started/windows-server-release-info

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Security Support Service Pack Support	Extended for a fee	Critical	High	Medium	Low
4561	Windows Server 2022	21H2	Nov. 2, 2021	Nov. 2, 2021	Oct. 13, 2026		Oct. 14, 2031	53	1279	421	5
4562	Windows Server 2019	1809	Oct. 2, 2018	Nov. 13, 2018	Jan. 9, 2024		Jan. 9, 2029	94	2460	885	11
4563	Windows Server 2016	20H2	Oct. 20, 2020	Oct. 15, 2016	Jan. 11, 2022		Jan. 12, 2027	103	2553	1010	15
4564	Windows Server 2012		Oct. 30, 2012	Oct. 30, 2012	Oct. 9, 2018		Oct. 10, 2023	94	2178	911	50
4565	Windows Server 2008 R2（ Service Pack 1適用）			Feb. 22, 2011		Jan. 14, 2020		0	0	0	0
4566	Windows Server 2008（Service Pack 2適用）			April 29, 2009		Jan. 14, 2020		0	0	0	0
4567	Microsoft Windows Server 2003（Service Pack 2適用）			May 28, 2003	July 13, 2010		July 14, 2015	0	128	53	15
4568	Microsoft Windows Storage Server 2003			May 5, 2003	Oct. 11, 2011		Oct. 9, 2016	0	128	53	15
4569	Microsoft Windows 2000（Service Pack 4適用）			March 31, 2000	June 30, 2005		July 13, 2010	2	40	19	0

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	Update date Published date	Show Affected	Exploit PoC Search
4561	- 4.7	MEDIUM	Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service (reboot…	CWE-20 Improper Input Validation	CVE-2013-3903	cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:win…	2024-11-21 10:54 2013-12-11	Show	GitHub Exploit DB Packet Storm

4562	7.8 7.2	HIGH Local	NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.	NVD-CWE-noinfo	CVE-2013-5065	cpe:2.3:o:microsoft:windows_2003_server:-:sp2	2026-04-23 01:45 2013-11-28	Show	GitHub Exploit DB Packet Storm

4563	- 7.1	HIGH	DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go…	CWE-20 Improper Input Validation	CVE-2013-3876	cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:windows_server_2012:-:* cpe:2.3:o:microsoft:wind…	2024-11-21 10:54 2013-11-18	Show	GitHub Exploit DB Packet Storm

4564	- 9.3	HIGH	Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, …	CWE-190 Integer Overflow or Wraparound	CVE-2013-3940	cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:windows_server_2012:-:* cpe:2.3:o:microsoft:wind…	2024-11-21 10:54 2013-11-13	Show	GitHub Exploit DB Packet Storm

4565	- 7.9	HIGH	Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3898	cpe:2.3:o:microsoft:windows_server_2012:-:*	2024-11-21 10:54 2013-11-13	Show	GitHub Exploit DB Packet Storm

4566	- 4.9	MEDIUM	The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…	CWE-200 Information Exposure	CVE-2013-3887	cpe:2.3:o:microsoft:windows_server_2012:-:*	2024-11-21 10:54 2013-11-13	Show	GitHub Exploit DB Packet Storm

4567	- 5.0	MEDIUM	Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows R…	CWE-20 Improper Input Validation	CVE-2013-3869	cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:windows_server_2012:-:* cpe:2.3:o:microsoft:wind…	2024-11-21 10:54 2013-11-13	Show	GitHub Exploit DB Packet Storm

4568	8.8 9.3	HIGH Network	The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…	CWE-787 Out-of-bounds Write	CVE-2013-3918	cpe:2.3:o:microsoft:windows_server_2012:r2:* cpe:2.3:o:microsoft:windows_server_2012:-:* cpe:2.3:o:microsoft:wind…	2026-04-23 01:41 2013-11-12	Show	GitHub Exploit DB Packet Storm

4569	7.8 9.3	HIGH Local	GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remo…	CWE-94 Code Injection	CVE-2013-3906	cpe:2.3:o:microsoft:windows_server_2008:-:sp2	2026-04-23 01:41 2013-11-7	Show	GitHub Exploit DB Packet Storm

4570	- 9.3	HIGH	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows…	CWE-94 Code Injection	CVE-2013-3894	cpe:2.3:o:microsoft:windows_server_2012:-:*	2024-11-21 10:54 2013-10-9	Show	GitHub Exploit DB Packet Storm