Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
AUTOMATICALLY VERIFIEDOFFICIAL VENDOR SOURCECOLLECTED 12 SEP 2026

Microsoft · AUTOMATIC DISCOVERY

Microsoft Windows Server Windows Server IoT 2019 for Storage

Microsoft Windows Server is tracked by BlackTree as an operating system or system software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Evidence status

This record passed BlackTree's automatic primary-source checks with a confidence score of 96. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.

Product overview

Microsoft Windows Server is tracked by BlackTree as an operating system or system software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Main capabilities

  • Application and workload execution
  • Hardware, networking and storage management
  • Security updates and platform maintenance

Typical use

Used on endpoints, servers, appliances, virtual machines or cloud instances.

Deployment

Installed on physical or virtual systems, or delivered as an appliance or cloud image.

This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .

Collected lifecycle data

ProductMicrosoft Windows Server
ReleaseWindows Server IoT 2019 for Storage
End of Support10 January 2029
Date precisionDay

Known exploited vulnerabilities

Catalogue updated 11 Sep 2026

These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.

CVE-2025-59287Added 24 Oct 2025

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Microsoft · WindowsRansomware use: Unknown

CISA entry
CVE-2017-8540Added 3 Mar 2022

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".

Microsoft · Malware Protection EngineRansomware use: Unknown

CISA entry
CVE-2015-2387Added 3 Mar 2022

Microsoft ATM Font Driver Privilege Escalation Vulnerability

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.

Microsoft · ATM Font DriverRansomware use: Unknown

CISA entry
CVE-2015-1701Added 3 Mar 2022

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

Microsoft · Win32kRansomware use: Known

CISA entry
CVE-2017-7269Added 3 Nov 2021

Microsoft Windows Server Buffer Overflow Vulnerability

Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.

Microsoft · Internet Information Services (IIS)Ransomware use: Unknown

CISA entry
CVE-2017-0143Added 3 Nov 2021

Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.

Microsoft · WindowsRansomware use: Known

CISA entry

Package vulnerability advisories

OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.

No package advisories have been linked for this product identity.

This is not evidence that the product has no vulnerabilities.

Source evidence

PRIMARYReady

Microsoft Windows Server official lifecycle source

summary | start | end | title | last_modified | locale | products | display_products | url | Windows Server IoT 2019 for Storage follows the Fixed Lifecycle Policy. | 2019-03-04T08:00:00Z | 2029-01-10T06:59:59.999Z | Windows Server IoT 2019 for Storage | 2020-07-04T00:00:00Z | en-us | ['windows'] | ['Windows'] | /lifecycle/products/windows-server-iot-2019-for-storage

Official vendor lifecycle or product-change property. Extracted records require human review.

First collected 1 Sep 2026 · Last collected 12 Sep 2026 · Review state accepted

Open official vendor source