Windows Server 20h2
Vendor:
First CVE: Aug 17, 2020 · Active for 5 years
54
Total CVEs
More Total CVEs than 98% of tracked products
10.8
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
66.7%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows Server 20h2 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 17, 2020
5 years ago
Most Recent CVE
Apr 14, 2026
101 days ago
CVE Severity & Scoring
Windows Server 20h254 CVEs
13%
81%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local39 (72.2%)
Network15 (27.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low44 (81.5%)
High10 (18.5%)
Unknown0 (0.0%)
User Interaction
None46 (85.2%)
Unknown0 (0.0%)
Required8 (14.8%)
Privileges Required
Low35 (64.8%)
High1 (1.9%)
None18 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (54 CVEs).
54 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-1472CRITICAL An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc | Aug 17, 2020 | 10.0 | 99 | YES | YES |
CVE-2021-31166CRITICAL HTTP Protocol Stack Remote Code Execution Vulnerability | May 11, 2021 | 9.8 | 98 | YES | YES |
CVE-2022-30190HIGH A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerab | Jun 1, 2022 | 7.8 | 97 | YES | YES |
CVE-2021-40444HIGH <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to expl | Sep 15, 2021 | 8.8 | 97 | YES | YES |
CVE-2021-34527HIGH <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this v | Jul 2, 2021 | 8.8 | 97 | YES | YES |
CVE-2021-1732HIGH Windows Win32k Elevation of Privilege Vulnerability | Feb 25, 2021 | 7.8 | 95 | YES | YES |
CVE-2021-40449HIGH Win32k Elevation of Privilege Vulnerability | Oct 13, 2021 | 7.8 | 94 | YES | YES |
CVE-2021-36942HIGH Windows LSA Spoofing Vulnerability | Aug 12, 2021 | 7.5 | 93 | YES | YES |
CVE-2022-21882HIGH Win32k Elevation of Privilege Vulnerability | Jan 11, 2022 | 7.8 | 91 | YES | YES |
CVE-2022-34713HIGH Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Aug 9, 2022 | 7.8 | 90 | YES | NO |
Exploit Exposure
Signals from CVEs in this product scope (54 CVEs).
CISA KEV
36 CVEs
66.7% of CVEs· 99th percentile
Metasploit
11 CVEs
20.4% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
1.9% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (54 CVEs).
Media Mentions
Signals from CVEs in this product scope (54 CVEs).
Top CNAs Publishing CVEs For Windows Server 20h2
Top CWEs
Versions
No cataloged versions.