What’s Vulnerable › Products

Microsoft Windows Server 2004 vulnerabilities

28 known vulnerabilities, 27 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Microsoft Windows Server 2004 version is affected

Exploited Microsoft Windows Server 2004 vulnerabilities

• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability
• CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability
• CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability
• CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
• CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
• CVE-2021-31166 — Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
• CVE-2021-34484 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
• CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation Vulnerability
• CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation Vulnerability
• CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability
• CVE-2021-40444 — Microsoft MSHTML Remote Code Execution Vulnerability
• CVE-2021-36955 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
• CVE-2021-36948 — Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
• CVE-2021-36942 — Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
• CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability
• CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
• CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability
• CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability
• CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability
• CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
• CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
• CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability
• CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability
• CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability
• CVE-2020-1472 — Microsoft Netlogon Privilege Escalation Vulnerability

Latest Microsoft Windows Server 2004 vulnerabilities

• CVE-2026-50508 — Windows NTLM Spoofing Vulnerability (CVSS 7.5)
• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability (CVSS 7.8) — exploited
• CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVSS 6.5) — exploited
• CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVSS 6.5) — exploited
• CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-40444 — Microsoft MSHTML Remote Code Execution Vulnerability (CVSS 6.8) — exploited
• CVE-2021-36955 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-36948 — Microsoft Windows Update Medic Service Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-36942 — Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability (CVSS 5.0) — exploited
• CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-34484 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability (CVSS 7.2) — exploited
• CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability (CVSS 7.2) — exploited
• CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability (CVSS 9.3) — exploited
• CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability (CVSS 2.1) — exploited
• CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CVSS 9.3) — exploited
• CVE-2021-31166 — Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability (CVSS 7.5) — exploited
• CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability (CVSS 4.6) — exploited
• CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability (CVSS 4.6) — exploited