Windows Server 2008 Security Vulnerabilities and Issues — Page 22 of Windows Server 2008 CVE List

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.57782EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0598

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0619

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0635

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

6.2CVSS6.8AI score0.00573EPSS

CVE•added 2019/04/09 2:29 a.m.•126 views

CVE-2019-0759

An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00401EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1474

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an aut...

7.8CVSS7.8AI score0.01199EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1477

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS8.2AI score0.04189EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/08/12 6:15 p.m.•126 views

CVE-2021-34537

Windows Bluetooth Driver Elevation of Privilege Vulnerability

8CVSS8.6AI score0.00259EPSS

CVE•added 2021/11/10 1:19 a.m.•126 views

CVE-2021-41371

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

4.4CVSS6.3AI score0.00408EPSS

CVE•added 2022/01/11 9:15 p.m.•126 views

CVE-2022-21925

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

5.4CVSS7.1AI score0.00866EPSS

CVE•added 2022/09/13 7:15 p.m.•126 views

CVE-2022-34719

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00395EPSS

CVE•added 2023/03/14 5:15 p.m.•126 views

CVE-2023-23421

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0034EPSS

CVE•added 2024/08/13 6:15 p.m.•126 views

CVE-2024-38152

Windows OLE Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01111EPSS

CVE•added 2009/01/14 10:30 p.m.•125 views

CVE-2008-4834

Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code ...

10CVSS8.4AI score0.69451EPSS

CVE•added 2011/12/30 1:55 a.m.•125 views

CVE-2011-3414

The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which ...

7.8CVSS6.4AI score0.76674EPSS

CVE•added 2018/03/14 5:29 p.m.•125 views

CVE-2018-0816

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerab...

7CVSS6.2AI score0.00718EPSS

CVE•added 2018/04/12 1:29 a.m.•125 views

CVE-2018-1015

9.3CVSS7.3AI score0.57782EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0549

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0554

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/04/08 11:29 p.m.•125 views

CVE-2019-0617

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.25636EPSS

CVE•added 2019/04/09 9:29 p.m.•125 views

CVE-2019-0842

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.20489EPSS

CVE•added 2020/06/09 8:15 p.m.•125 views

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

8.8CVSS8.3AI score0.27581EPSS

CVE•added 2020/08/17 7:15 p.m.•125 views

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s systemTo exploit this vulnerability, an attacker would need to run a special...

5.5CVSS6.9AI score0.00958EPSS

CVE•added 2020/10/16 11:15 p.m.•125 views

CVE-2020-16939

An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have to log on to the system, and then run a speciall...

7.8CVSS8AI score0.23226EPSS

CVE•added 2021/01/12 8:15 p.m.•125 views

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.00889EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability