Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Windows Server Number Of NVD 5091 CRITICAL 122 HIGH 3461 MEDIUM 1438 LOW 70
URL https://www.microsoft.com/
Explanation Server products offered by Microsoft.

For business, developer, and desktop operating system products, 10 years of support at the supported Service Pack level (with a minimum of 5 years of mainstream support, followed by a minimum of 5 years of extended support).
You may need to deploy the latest updates to be eligible for support.
For some products, the support organization may be less than 10 years.

For consumer and multimedia products, five years of mainstream support at the supported Service Pack level.

The above text is excerpted from Microsoft's Fixed Lifecycle Policy.
Tag
  • 商用ライセンス有り
  • Microsoft
Add Information URL
No Type Name URL
1 https://support.microsoft.com//lifecycle/search
2 https://www.microsoft.com/ja-jp/cloud-platform/windows-server
3 https://support.microsoft.com/ja-jp/hub/4095338/microsoft-lifecycle-policy
4 https://docs.microsoft.com/ja-jp/windows-server/get-started/windows-server-release-info
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
4761 Windows Server 2022 21H2 Nov. 2, 2021 Nov. 2, 2021 Oct. 13, 2026 Oct. 14, 2031 53 1279 421 5
4762 Windows Server 2019 1809 Oct. 2, 2018 Nov. 13, 2018 Jan. 9, 2024 Jan. 9, 2029 94 2460 885 11
4763 Windows Server 2016 20H2 Oct. 20, 2020 Oct. 15, 2016 Jan. 11, 2022 Jan. 12, 2027 103 2553 1010 15
4764 Windows Server 2012 Oct. 30, 2012 Oct. 30, 2012 Oct. 9, 2018 Oct. 10, 2023 94 2178 911 50
4765 Windows Server 2008 R2（ Service Pack 1適用） Feb. 22, 2011 Jan. 14, 2020 0 0 0 0
4766 Windows Server 2008（Service Pack 2適用） April 29, 2009 Jan. 14, 2020 0 0 0 0
4767 Microsoft Windows Server 2003（Service Pack 2適用） May 28, 2003 July 13, 2010 July 14, 2015 0 128 53 15
4768 Microsoft Windows Storage Server 2003 May 5, 2003 Oct. 11, 2011 Oct. 9, 2016 0 128 53 15
4769 Microsoft Windows 2000（Service Pack 4適用） March 31, 2000 June 30, 2005 July 13, 2010 2 40 19 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
4761 -
9.3 		HIGH The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform … CWE-94
Code Injection 		CVE-2010-3956 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4762 -
7.2 		HIGH win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted applicati… CWE-20
 Improper Input Validation  		CVE-2010-3944 cpe:2.3:o:microsoft:windows_server_2008:r2:*
cpe:2.3:o:microsoft:windows_server_2008:r2:* 		2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4763 -
7.2 		HIGH win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-3943 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4764 -
7.2 		HIGH win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3942 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4765 -
7.2 		HIGH Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windo… CWE-399
 Resource Management Errors 		CVE-2010-3941 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4766 -
7.2 		HIGH Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and … CWE-399
 Resource Management Errors 		CVE-2010-3940 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4767 -
7.2 		HIGH Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3939 cpe:2.3:o:microsoft:windows_server_2008:-:sp2 2024-11-21 10:19
2010-12-17 		Show GitHub Exploit DB Packet Storm
4768 -
7.2 		HIGH The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allo… CWE-20
 Improper Input Validation  		CVE-2010-3338 cpe:2.3:o:microsoft:windows_server_2008:r2:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*
cpe:2.3:o:microsoft:win… 		2024-11-21 10:18
2010-12-17 		Show GitHub Exploit DB Packet Storm
4769 -
5.4 		MEDIUM The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL… NVD-CWE-Other
CVE-2010-2742 cpe:2.3:o:microsoft:windows_server_2008:r2:* 2024-11-21 10:17
2010-12-17 		Show GitHub Exploit DB Packet Storm
4770 7.8
7.2 		HIGH
Local 		Desbordamiento de buffer basado en pila en la función RtlQueryRegistryValues de win32k.sys de Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 hasta la versión R2 y Windo… CWE-787
 Out-of-bounds Write 		CVE-2010-4398 cpe:2.3:o:microsoft:windows_server_2008:r2:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2
cpe:2.3:o:microsoft:wi… 		2026-04-22 05:30
2010-12-6 		Show GitHub Exploit DB Packet Storm