[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fddYqFxim6w6NYNq3Kun4FedzQ2RGsXvCzNSPTd4pSl4":3,"g5a-family:microsoft\u002Fwindows_server_1709":130,"g5a-ex:microsoft\u002Fwindows_server_1709@*":131},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":69,"seoMetadata":108,"meta":127},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"microsoft","windows_server_1709",0,13,10,"2019-06-12",[],"Windows Server 1709 by Microsoft is a technology product and 13 known security vulnerabilities including 10 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,30,36,43,49,53,58,62,66],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2018-0824","A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","2018-05-09",8.8,"v3.1","High",0.73185,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":29},"CVE-2018-8414","A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka \"Windows Shell Remote Code Execution Vulnerability.\" This affects Windows 10 Servers, Windows 10.","2018-08-15",0.72912,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":35},"CVE-2018-8453","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","2018-10-10",7.8,0.70042,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":22,"severity":41,"isKev":4,"epssScore":42},"CVE-2019-0703","An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.","2019-04-09",6.5,"Medium",0.0964,{"cveId":44,"description":45,"publishedDate":33,"cvssScore":46,"cvssVersion":22,"severity":23,"isKev":47,"epssScore":48},"CVE-2018-8493","An information disclosure vulnerability exists when the Windows TCP\u002FIP stack improperly handles fragmented IP packets, aka \"Windows TCP\u002FIP Information Disclosure Vulnerability.\" This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.",7.5,false,0.08421,{"cveId":50,"description":51,"publishedDate":12,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":52},"CVE-2019-1064","An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.",0.06886,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":57},"CVE-2019-0543","An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka \"Microsoft Windows Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","2019-01-08",0.04718,{"cveId":59,"description":60,"publishedDate":39,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":61},"CVE-2019-0859","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",0.04151,{"cveId":63,"description":64,"publishedDate":28,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":65},"CVE-2018-8405","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.",0.03444,{"cveId":67,"description":68,"publishedDate":28,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":65},"CVE-2018-8406","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.",[70,75,80,84,85,89,93,96,100,106],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":71,"cisaDateAdded":72,"cisaShortDescription":73,"cisaRequiredAction":74},"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","2024-08-05","Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"severity":41,"isKev":4,"epssScore":42,"cisaVulnName":76,"cisaDateAdded":77,"cisaShortDescription":78,"cisaRequiredAction":79},"Microsoft Windows SMB Information Disclosure Vulnerability","2022-05-23","An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.","Apply updates per vendor instructions.",{"cveId":63,"description":64,"publishedDate":28,"cvssScore":34,"severity":23,"isKev":4,"epssScore":65,"cisaVulnName":81,"cisaDateAdded":82,"cisaShortDescription":83,"cisaRequiredAction":79},"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","2022-03-28","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.",{"cveId":67,"description":68,"publishedDate":28,"cvssScore":34,"severity":23,"isKev":4,"epssScore":65,"cisaVulnName":81,"cisaDateAdded":82,"cisaShortDescription":83,"cisaRequiredAction":79},{"cveId":26,"description":27,"publishedDate":28,"cvssScore":21,"severity":23,"isKev":4,"epssScore":29,"cisaVulnName":86,"cisaDateAdded":87,"cisaShortDescription":88,"cisaRequiredAction":79},"Microsoft Windows Shell Remote Code Execution Vulnerability","2022-03-25","A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.",{"cveId":50,"description":51,"publishedDate":12,"cvssScore":34,"severity":23,"isKev":4,"epssScore":52,"cisaVulnName":90,"cisaDateAdded":91,"cisaShortDescription":92,"cisaRequiredAction":79},"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","2022-03-15","A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.",{"cveId":54,"description":55,"publishedDate":56,"cvssScore":34,"severity":23,"isKev":4,"epssScore":57,"cisaVulnName":94,"cisaDateAdded":91,"cisaShortDescription":95,"cisaRequiredAction":79},"Microsoft Windows Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.",{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"severity":23,"isKev":4,"epssScore":35,"cisaVulnName":97,"cisaDateAdded":98,"cisaShortDescription":99,"cisaRequiredAction":79},"Microsoft Win32k Privilege Escalation Vulnerability","2022-01-21","Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.",{"cveId":101,"description":102,"publishedDate":39,"cvssScore":34,"severity":23,"isKev":4,"epssScore":103,"cisaVulnName":97,"cisaDateAdded":104,"cisaShortDescription":105,"cisaRequiredAction":79},"CVE-2019-0797","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",0.01874,"2021-11-03","Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.",{"cveId":59,"description":60,"publishedDate":39,"cvssScore":34,"severity":23,"isKev":4,"epssScore":61,"cisaVulnName":97,"cisaDateAdded":104,"cisaShortDescription":107,"cisaRequiredAction":79},"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.",{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Windows Server 1709 by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows Server 1709 by Microsoft with 13 tracked vulnerabilities including 0 critical and 9 high-severity issues and 10 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows Server 1709 vulnerabilities, Windows Server 1709 security, Windows Server 1709 CVE, Microsoft Windows Server 1709, Windows Server 1709 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows Server 1709 KEV, Windows Server 1709 exploited vulnerabilities",{"@context":113,"@type":114,"name":115,"description":110,"url":116,"manufacturer":117,"applicationCategory":121,"softwareVersion":122,"mainEntity":123},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows Server 1709","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_server_1709",{"@type":118,"name":119,"url":120},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","Multiple versions",{"@type":124,"name":125,"description":126,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows Server 1709 Security Vulnerabilities","Security vulnerabilities affecting Windows Server 1709 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":128,"apiVersion":129},"2026-10-17T15:56:31.330Z","3.0",[],{"rows":132,"total":11,"capped":47,"failed":9},[133,137,141,145,149,153,157,161,165,169],{"cveId":18,"name":71,"severity":23,"cvss":21,"added":72,"epss":24,"published":134,"ranges":135,"checked":4,"hits":136,"covers":47},"2018-05-09T19:29:00.37",[],[],{"cveId":37,"name":76,"severity":41,"cvss":40,"added":77,"epss":42,"published":138,"ranges":139,"checked":4,"hits":140,"covers":47},"2019-04-09T00:29:00.887",[],[],{"cveId":63,"name":81,"severity":23,"cvss":34,"added":82,"epss":65,"published":142,"ranges":143,"checked":4,"hits":144,"covers":47},"2018-08-15T17:29:10.05",[],[],{"cveId":67,"name":81,"severity":23,"cvss":34,"added":82,"epss":65,"published":146,"ranges":147,"checked":4,"hits":148,"covers":47},"2018-08-15T17:29:10.157",[],[],{"cveId":26,"name":86,"severity":23,"cvss":21,"added":87,"epss":29,"published":150,"ranges":151,"checked":4,"hits":152,"covers":47},"2018-08-15T17:29:10.393",[],[],{"cveId":50,"name":90,"severity":23,"cvss":34,"added":91,"epss":52,"published":154,"ranges":155,"checked":4,"hits":156,"covers":47},"2019-06-12T14:29:04.273",[],[],{"cveId":54,"name":94,"severity":23,"cvss":34,"added":91,"epss":57,"published":158,"ranges":159,"checked":4,"hits":160,"covers":47},"2019-01-08T21:29:00.517",[],[],{"cveId":31,"name":97,"severity":23,"cvss":34,"added":98,"epss":35,"published":162,"ranges":163,"checked":4,"hits":164,"covers":47},"2018-10-10T13:29:02.557",[],[],{"cveId":101,"name":97,"severity":23,"cvss":34,"added":104,"epss":103,"published":166,"ranges":167,"checked":4,"hits":168,"covers":47},"2019-04-09T03:29:00.763",[],[],{"cveId":59,"name":97,"severity":23,"cvss":34,"added":104,"epss":61,"published":170,"ranges":171,"checked":4,"hits":172,"covers":47},"2019-04-09T21:29:02.52",[],[]]