Windows Server 2008 Security Vulnerabilities and Issues — Page 26 of Windows Server 2008 CVE List

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is uniq...

7.6CVSS7.8AI score0.00421EPSS

CVE•added 2020/08/17 7:15 p.m.•118 views

CVE-2020-1529

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete d...

7.8CVSS8.1AI score0.00505EPSS

CVE•added 2020/09/11 5:15 p.m.•118 views

CVE-2020-1596

A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.To exploit the vulnerability, an attacker would have to condu...

5.4CVSS6.2AI score0.00252EPSS

CVE•added 2021/02/25 11:15 p.m.•118 views

CVE-2021-1722

Windows Fax Service Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.01984EPSS

CVE•added 2021/10/13 1:15 a.m.•118 views

CVE-2021-41331

Windows Media Audio Decoder Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.01999EPSS

CVE•added 2022/01/11 9:15 p.m.•118 views

CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

7.8CVSS8.3AI score0.00492EPSS

CVE•added 2022/10/11 7:15 p.m.•118 views

CVE-2022-34689

Windows CryptoAPI Spoofing Vulnerability

7.5CVSS8.5AI score0.18057EPSS

CVE•added 2022/12/13 7:15 p.m.•118 views

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.63251EPSS

CVE•added 2024/05/14 5:16 p.m.•118 views

CVE-2024-30015

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.5CVSS7AI score0.01729EPSS

CVE•added 2024/11/12 6:15 p.m.•118 views

CVE-2024-43641

Windows Registry Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00144EPSS

CVE•added 2018/08/15 5:29 p.m.•117 views

CVE-2018-8341

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv...

4.7CVSS5.6AI score0.01452EPSS

CVE•added 2019/06/12 2:29 p.m.•117 views

CVE-2019-0907

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.1AI score0.10107EPSS

CVE•added 2019/08/14 9:15 p.m.•117 views

CVE-2019-1148

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker wou...

5.5CVSS6.7AI score0.03723EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1379

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS7.3AI score0.20332EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1554

7.8CVSS8.6AI score0.13831EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1584

An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially craft...

7.8CVSS8.1AI score0.0073EPSS

CVE•added 2021/04/13 8:15 p.m.•117 views

CVE-2021-28357

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/07/14 6:15 p.m.•117 views

CVE-2021-34498

Windows GDI Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00273EPSS

CVE•added 2021/10/13 1:15 a.m.•117 views

CVE-2021-40467

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00465EPSS

CVE•added 2021/10/13 1:15 a.m.•117 views

CVE-2021-40489

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00496EPSS

CVE•added 2021/10/13 1:15 a.m.•117 views

CVE-2021-41340

Windows Graphics Component Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.01999EPSS

CVE•added 2021/11/10 1:19 a.m.•117 views

CVE-2021-41377

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00263EPSS

CVE•added 2022/04/15 7:15 p.m.•117 views

CVE-2022-26790

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00367EPSS

CVE•added 2022/08/09 8:15 p.m.•117 views

CVE-2022-34690

Windows Fax Service Elevation of Privilege Vulnerability

7.1CVSS8.1AI score0.00247EPSS

CVE•added 2022/09/13 7:15 p.m.•117 views

CVE-2022-34724

Windows DNS Server Denial of Service Vulnerability

7.5CVSS8.4AI score0.04296EPSS

CVE•added 2022/11/09 10:15 p.m.•117 views

CVE-2022-41045

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00104EPSS

CVE•added 2023/12/12 6:15 p.m.•117 views

CVE-2023-21740

Windows Media Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.00353EPSS

CVE•added 2023/03/14 5:15 p.m.•117 views

CVE-2023-23401

Windows Media Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00367EPSS

CVE•added 2023/04/11 9:15 p.m.•117 views

CVE-2023-24931

Windows Secure Channel Denial of Service Vulnerability

7.5CVSS7.4AI score0.03509EPSS

CVE•added 2012/10/09 9:55 p.m.•116 views

CVE-2012-2551

The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."

5CVSS6.4AI score0.73659EPSS

CVE•added 2017/03/17 12:59 a.m.•116 views

CVE-2017-0100

A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation o...

7.8CVSS6.2AI score0.30443EPSS

CVE•added 2018/08/15 5:29 p.m.•116 views

CVE-2018-8394

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

6.5CVSS5.7AI score0.14286EPSS

CVE•added 2018/12/12 12:29 a.m.•116 views

CVE-2018-8477

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS6.5AI score0.01202EPSS

CVE•added 2019/05/16 7:29 p.m.•116 views

CVE-2019-0899

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/06/12 2:29 p.m.•116 views

CVE-2019-0974

9.3CVSS8AI score0.13023EPSS

CVE•added 2019/06/12 2:29 p.m.•116 views

CVE-2019-1010

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit ...

6.5CVSS5.6AI score0.07622EPSS

CVE•added 2020/01/14 11:15 p.m.•116 views

CVE-2020-0643

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI+ Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.00978EPSS

CVE•added 2020/04/15 3:15 p.m.•116 views

CVE-2020-0953

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS

CVE•added 2020/08/17 7:15 p.m.•116 views

CVE-2020-1378

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.A locally authenticated attacker could exploit this vulnerability by...

7.8CVSS8.2AI score0.03388EPSS

CVE•added 2020/08/17 7:15 p.m.•116 views

CVE-2020-1467

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.To exploit this vulnerability, an attacker would first have to log on to the system. An ...

10CVSS9.1AI score0.01908EPSS

CVE•added 2020/08/17 7:15 p.m.•116 views

CVE-2020-1520

A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Windows Font Driver Host ha...

7.8CVSS8.7AI score0.00505EPSS

CVE•added 2020/10/16 11:15 p.m.•116 views

CVE-2020-16975

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.00542EPSS

CVE•added 2021/01/12 8:15 p.m.•116 views

CVE-2021-1649

Active Template Library Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS

CVE•added 2021/04/13 8:15 p.m.•116 views

CVE-2021-28356

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•116 views

CVE-2021-28358

Remote Procedure Call Runtime Remote Code Execution Vulnerability