# Windows Server 1803 vulnerabilities

> Windows Server 1803 is made by Microsoft. We track 34 published vulnerabilities in it, across 0 versions. 28 of them are on the list of flaws known to be exploited, the newest added on 5 August 2024. If you run Windows Server 1803, check your version against the exploited flaws below and patch those first.

Canonical page: https://www.precursorintelligence.com/product/microsoft/windows_server_1803

## At a glance

- **Made by:** [Microsoft](https://www.precursorintelligence.com/vendors/microsoft)
- **Published vulnerabilities:** 34
- **Known to be exploited:** 28
- **Versions tracked:** 0
- **Most recently added to the known-exploited list:** [CVE-2018-0824](https://www.precursorintelligence.com/what-is/cve-2018-0824), 5 August 2024. We keep watching the list.

## Which Windows Server 1803 vulnerabilities are being exploited?

28 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2018-0824](https://www.precursorintelligence.com/what-is/cve-2018-0824): Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability. High, CVSS 8.8, chance of use in 30 days 73%, known exploited since 5 August 2024.
- [CVE-2019-1130](https://www.precursorintelligence.com/what-is/cve-2019-1130): Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.7%, known exploited since 23 May 2022.
- [CVE-2019-0703](https://www.precursorintelligence.com/what-is/cve-2019-0703): Microsoft Windows SMB Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 9.6%, known exploited since 23 May 2022.
- [CVE-2020-0638](https://www.precursorintelligence.com/what-is/cve-2020-0638): Microsoft Update Notification Manager Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 2.4%, known exploited since 23 May 2022.
- [CVE-2020-1027](https://www.precursorintelligence.com/what-is/cve-2020-1027): Microsoft Windows Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.5%, known exploited since 23 May 2022.
- [CVE-2018-8406](https://www.precursorintelligence.com/what-is/cve-2018-8406): Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.4%, known exploited since 28 March 2022.
- [CVE-2018-8405](https://www.precursorintelligence.com/what-is/cve-2018-8405): Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.4%, known exploited since 28 March 2022.
- [CVE-2019-0903](https://www.precursorintelligence.com/what-is/cve-2019-0903): Microsoft GDI Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 22%, known exploited since 25 March 2022.
- [CVE-2018-8414](https://www.precursorintelligence.com/what-is/cve-2018-8414): Microsoft Windows Shell Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 73%, known exploited since 25 March 2022.
- [CVE-2019-1129](https://www.precursorintelligence.com/what-is/cve-2019-1129): Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.8%, known exploited since 15 March 2022.
- [CVE-2019-1322](https://www.precursorintelligence.com/what-is/cve-2019-1322): Microsoft Windows Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 19%, known exploited since 15 March 2022.
- [CVE-2019-0543](https://www.precursorintelligence.com/what-is/cve-2019-0543): Microsoft Windows Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.7%, known exploited since 15 March 2022.
- [CVE-2019-1064](https://www.precursorintelligence.com/what-is/cve-2019-1064): Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 6.9%, known exploited since 15 March 2022.
- [CVE-2019-1069](https://www.precursorintelligence.com/what-is/cve-2019-1069): Microsoft Task Scheduler Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 6.1%, known exploited since 15 March 2022.
- [CVE-2019-1253](https://www.precursorintelligence.com/what-is/cve-2019-1253): Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 12%, known exploited since 15 March 2022.
- [CVE-2019-1405](https://www.precursorintelligence.com/what-is/cve-2019-1405): Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 30%, known exploited since 15 March 2022.
- [CVE-2020-0787](https://www.precursorintelligence.com/what-is/cve-2020-0787): Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability. High, CVSS 7.8, chance of use in 30 days 43%, known exploited since 28 January 2022.
- [CVE-2018-8453](https://www.precursorintelligence.com/what-is/cve-2018-8453): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 70%, known exploited since 21 January 2022.
- [CVE-2019-1215](https://www.precursorintelligence.com/what-is/cve-2019-1215): Microsoft Windows Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 19%, known exploited since 3 November 2021.
- [CVE-2019-1214](https://www.precursorintelligence.com/what-is/cve-2019-1214): Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.4%, known exploited since 3 November 2021.
- [CVE-2020-0601](https://www.precursorintelligence.com/what-is/cve-2020-0601): Microsoft Windows CryptoAPI Spoofing Vulnerability. High, CVSS 8.1, chance of use in 30 days 89%, known exploited since 3 November 2021.
- [CVE-2020-1054](https://www.precursorintelligence.com/what-is/cve-2020-1054): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 54%, known exploited since 3 November 2021.
- [CVE-2020-0683](https://www.precursorintelligence.com/what-is/cve-2020-0683): Microsoft Windows Installer Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 7.6%, known exploited since 3 November 2021.
- [CVE-2019-0863](https://www.precursorintelligence.com/what-is/cve-2019-0863): Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 5.2%, known exploited since 3 November 2021.
- [CVE-2020-0938](https://www.precursorintelligence.com/what-is/cve-2020-0938): Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 69%, known exploited since 3 November 2021.
- [CVE-2019-0859](https://www.precursorintelligence.com/what-is/cve-2019-0859): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.2%, known exploited since 3 November 2021.
- [CVE-2019-0797](https://www.precursorintelligence.com/what-is/cve-2019-0797): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.9%, known exploited since 3 November 2021.
- [CVE-2020-0986](https://www.precursorintelligence.com/what-is/cve-2020-0986): Microsoft Windows Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 16%, known exploited since 3 November 2021.

## Which Windows Server 1803 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2020-0601](https://www.precursorintelligence.com/what-is/cve-2020-0601): 89%, High (CVSS 8.1), known exploited
- [CVE-2018-0824](https://www.precursorintelligence.com/what-is/cve-2018-0824): 73%, High (CVSS 8.8), known exploited
- [CVE-2018-8414](https://www.precursorintelligence.com/what-is/cve-2018-8414): 73%, High (CVSS 8.8), known exploited
- [CVE-2018-8453](https://www.precursorintelligence.com/what-is/cve-2018-8453): 70%, High (CVSS 7.8), known exploited
- [CVE-2020-0938](https://www.precursorintelligence.com/what-is/cve-2020-0938): 69%, High (CVSS 7.8), known exploited
- [CVE-2018-8239](https://www.precursorintelligence.com/what-is/cve-2018-8239): 58%, Medium (CVSS 5.5)
- [CVE-2020-1054](https://www.precursorintelligence.com/what-is/cve-2020-1054): 54%, High (CVSS 7.8), known exploited
- [CVE-2020-0787](https://www.precursorintelligence.com/what-is/cve-2020-0787): 43%, High (CVSS 7.8), known exploited
- [CVE-2019-1405](https://www.precursorintelligence.com/what-is/cve-2019-1405): 30%, High (CVSS 7.8), known exploited
- [CVE-2019-0903](https://www.precursorintelligence.com/what-is/cve-2019-0903): 22%, High (CVSS 8.8), known exploited

## Questions

### How many vulnerabilities does Windows Server 1803 have?

We track 34 published vulnerabilities listed under the name Windows Server 1803, across 0 versions. The most recent Windows Server 1803 flaw added to the known-exploited list is CVE-2018-0824, on 5 August 2024.

### Which Windows Server 1803 vulnerabilities are being exploited?

28 are on the list of flaws known to be exploited. The most recently added are CVE-2018-0824, CVE-2019-1130 and CVE-2019-0703.

### How do I get alerts for Windows Server 1803?

Create a Precursor Intelligence account and track Windows Server 1803. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

## Running Windows Server 1803?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

