Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftWindows Server 2008

3407 matches found

CVE
CVE•added 2023/02/14 8:15 p.m.•111 views

CVE-2023-21693

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

5.7CVSS5.5AI score0.00634EPSS
CVE
CVE•added 2023/04/11 9:15 p.m.•111 views

CVE-2023-28272

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00386EPSS
CVE
CVE•added 2024/05/14 5:16 p.m.•111 views

CVE-2024-30014

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.5CVSS7AI score0.01729EPSS
CVE
CVE•added 2024/05/14 5:17 p.m.•111 views

CVE-2024-30029

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.5CVSS7AI score0.01744EPSS
CVE
CVE•added 2024/08/13 6:15 p.m.•111 views

CVE-2024-38127

Windows Hyper-V Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.20354EPSS
CVE
CVE•added 2025/01/14 6:15 p.m.•111 views

CVE-2025-21286

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.01274EPSS
CVE
CVE•added 2025/01/14 6:15 p.m.•111 views

CVE-2025-21332

MapUrlToZone Security Feature Bypass Vulnerability

8.8CVSS4.6AI score0.00115EPSS
CVE
CVE•added 2009/01/14 10:30 p.m.•110 views

CVE-2008-4835

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficie...

10CVSS8.2AI score0.63471EPSS
CVE
CVE•added 2016/04/12 11:59 p.m.•110 views

CVE-2016-0145

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype for Business 2016; Lyn...

9.3CVSS7.7AI score0.74815EPSS
CVE
CVE•added 2018/05/09 7:29 p.m.•110 views

CVE-2018-8127

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv...

5.5CVSS5.3AI score0.02721EPSS
CVE
CVE•added 2018/09/13 12:29 a.m.•110 views

CVE-2018-8443

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS5.7AI score0.04881EPSS
CVE
CVE•added 2018/09/13 12:29 a.m.•110 views

CVE-2018-8446

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS5.7AI score0.04881EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•110 views

CVE-2019-1012

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit ...

6.5CVSS5.6AI score0.07622EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•110 views

CVE-2019-1243

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•110 views

CVE-2019-1290

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1291.

9.3CVSS8.8AI score0.32912EPSS
CVE
CVE•added 2020/02/11 10:15 p.m.•110 views

CVE-2020-0731

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE...

7.8CVSS7.7AI score0.00549EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•110 views

CVE-2020-0822

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00511EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•110 views

CVE-2020-0889

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•110 views

CVE-2020-1285

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

9.3CVSS8.7AI score0.09124EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•110 views

CVE-2020-1317

An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.

9CVSS8.2AI score0.13405EPSS
CVE
CVE•added 2020/12/10 12:15 a.m.•110 views

CVE-2020-16959

Windows Backup Engine Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0137EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•110 views

CVE-2020-17044

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0452EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•110 views

CVE-2021-1700

Remote Procedure Call Runtime Remote Code Execution Vulnerability

9CVSS8.3AI score0.07046EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•110 views

CVE-2021-28331

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•110 views

CVE-2021-28343

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE•added 2021/09/15 12:15 p.m.•110 views

CVE-2021-36962

Windows Installer Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00478EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•110 views

CVE-2022-41044

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00147EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•110 views

CVE-2022-41121

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00179EPSS
CVE
CVE•added 2023/04/11 9:15 p.m.•110 views

CVE-2023-28254

Windows DNS Server Remote Code Execution Vulnerability

7.2CVSS7.2AI score0.01EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•110 views

CVE-2023-32038

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.00379EPSS
CVE
CVE•added 2024/11/12 6:15 p.m.•110 views

CVE-2024-43634

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00259EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•109 views

CVE-2009-2526

Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."

7.8CVSS6.3AI score0.80775EPSS
CVE
CVE•added 2016/02/10 11:59 a.m.•109 views

CVE-2016-0042

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote Co...

7.8CVSS7.8AI score0.01232EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•109 views

CVE-2016-3237

Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM authent...

7.5CVSS7.4AI score0.21452EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•109 views

CVE-2017-0062

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a ...

4.7CVSS4.3AI score0.14618EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•109 views

CVE-2019-0898

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•109 views

CVE-2019-0908

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8AI score0.07323EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•109 views

CVE-2019-1014

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; o...

7.8CVSS7.8AI score0.00167EPSS
CVE
CVE•added 2019/08/14 9:15 p.m.•109 views

CVE-2019-1164

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

7.8CVSS8.6AI score0.00651EPSS
CVE
CVE•added 2019/08/14 9:15 p.m.•109 views

CVE-2019-1183

This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194. No update is required.

9.3CVSS8.4AI score0.11939EPSS
CVE
CVE•added 2019/12/10 10:15 p.m.•109 views

CVE-2019-1484

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

7.8CVSS8.3AI score0.26234EPSS
CVE
CVE•added 2020/02/11 10:15 p.m.•109 views

CVE-2020-0657

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.00511EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•109 views

CVE-2020-1515

An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The securit...

7.8CVSS8.5AI score0.00387EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•109 views

CVE-2021-1706

Windows LUAFV Elevation of Privilege Vulnerability

9CVSS7.8AI score0.00676EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•109 views

CVE-2021-1709

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00275EPSS
CVE
CVE•added 2021/03/11 4:15 p.m.•109 views

CVE-2021-26895

Windows DNS Server Remote Code Execution Vulnerability

10CVSS9.6AI score0.09935EPSS
CVE
CVE•added 2021/10/13 1:15 a.m.•109 views

CVE-2021-38663

Windows exFAT File System Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00418EPSS
CVE
CVE•added 2021/10/13 1:15 a.m.•109 views

CVE-2021-40443

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00465EPSS
CVE
CVE•added 2022/04/15 7:15 p.m.•109 views

CVE-2022-26794

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0036EPSS
CVE
CVE•added 2023/05/31 7:15 p.m.•109 views

CVE-2022-35750

Win32k Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.05669EPSS
Total number of security vulnerabilities3407