Microsoft Windows Server version 2004 vulnerabilities

Latest Microsoft Windows Server version 2004 CVEs

Newest publication first · page 1 of 10

1. CVE-2026-50508 Windows NTLM Spoofing Vulnerability

   Published 2026-06-09

   High·CVSS 7.5 EPSS 11.4%

   Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

2. CVE-2021-42291 Active Directory Domain Services Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 8.8 EPSS 4.2%

   Active Directory Domain Services Elevation of Privilege Vulnerability

3. CVE-2021-42288 Windows Hello Security Feature Bypass Vulnerability

   Published 2021-11-10

   Medium·CVSS 6.1 EPSS 0.71%

   Windows Hello Security Feature Bypass Vulnerability

4. CVE-2021-42287 Active Directory Domain Services Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 8.8 EPSS 77.2% CISA KEV added 2022-04-11 Ransomware Exploited in the wild

   Active Directory Domain Services Elevation of Privilege Vulnerability

5. CVE-2021-42286 Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 7.8 EPSS 0.49%

   Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

6. CVE-2021-42285 Windows Kernel Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 7.8 EPSS 0.55%

   Windows Kernel Elevation of Privilege Vulnerability

7. CVE-2021-42284 Windows Hyper-V Denial of Service Vulnerability

   Published 2021-11-10

   High·CVSS 7.5 EPSS 3.8%

   Windows Hyper-V Denial of Service Vulnerability

8. CVE-2021-42283 NTFS Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 7.8 EPSS 0.49%

   NTFS Elevation of Privilege Vulnerability

9. CVE-2021-42282 Active Directory Domain Services Elevation of Privilege Vulnerability

   Published 2021-11-10

   High·CVSS 8.8 EPSS 4.2%

   Active Directory Domain Services Elevation of Privilege Vulnerability

10. CVE-2021-42280 Windows Feedback Hub Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.96%

    Windows Feedback Hub Elevation of Privilege Vulnerability

11. CVE-2021-42279 Chakra Scripting Engine Memory Corruption Vulnerability

    Published 2021-11-10

    High·CVSS 7.5 EPSS 2.3%

    Chakra Scripting Engine Memory Corruption Vulnerability

12. CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.5 EPSS 73.3% CISA KEV added 2022-04-11 Ransomware Exploited in the wild

    Active Directory Domain Services Elevation of Privilege Vulnerability

13. CVE-2021-42277 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.87%

    Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

14. CVE-2021-42276 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 2.5%

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

15. CVE-2021-42275 Microsoft COM for Windows Remote Code Execution Vulnerability

    Published 2021-11-10

    High·CVSS 8.8 EPSS 2.1%

    Microsoft COM for Windows Remote Code Execution Vulnerability

16. CVE-2021-42274 Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

    Published 2021-11-10

    Medium·CVSS 6.5 EPSS 0.69%

    Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

17. CVE-2021-41379 Windows Installer Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 19.5% CISA KEV added 2022-03-03 Ransomware Exploited in the wild

    Windows Installer Elevation of Privilege Vulnerability

18. CVE-2021-41378 Windows NTFS Remote Code Execution Vulnerability

    Published 2021-11-10

    High·CVSS 8.8 EPSS 1.6%

    Windows NTFS Remote Code Execution Vulnerability

19. CVE-2021-41377 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.49%

    Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

20. CVE-2021-41371 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Published 2021-11-10

    Medium·CVSS 4.4 EPSS 1.6%

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

21. CVE-2021-41370 NTFS Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.49%

    NTFS Elevation of Privilege Vulnerability

22. CVE-2021-41367 NTFS Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.49%

    NTFS Elevation of Privilege Vulnerability

23. CVE-2021-41366 Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.49%

    Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

24. CVE-2021-41356 Windows Denial of Service Vulnerability

    Published 2021-11-10

    High·CVSS 7.5 EPSS 3.0%

    Windows Denial of Service Vulnerability

25. CVE-2021-38666 Remote Desktop Client Remote Code Execution Vulnerability

    Published 2021-11-10

    High·CVSS 8.8 EPSS 15.2%

    Remote Desktop Client Remote Code Execution Vulnerability

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.