Windows Server 2008 Security Vulnerabilities and Issues — Page 6 of Windows Server 2008 CVE List

Lucene search

MicrosoftWindows Server 2008

3446 matches found

CVE•added 2022/09/13 7:15 p.m.•305 views

CVE-2022-34721

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.18666EPSS

CVE•added 2012/03/13 9:55 p.m.•304 views

CVE-2012-0002

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

9.3CVSS9.5AI score0.87223EPSS

CVE•added 2025/03/11 5:16 p.m.•300 views

CVE-2025-24983

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7CVSS7.2AI score0.01229EPSS

CVE•added 2025/02/11 6:15 p.m.•299 views

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.11464EPSS

CVE•added 2021/07/14 6:15 p.m.•298 views

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00403EPSS

CVE•added 2025/03/11 5:16 p.m.•298 views

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

7CVSS6.8AI score0.06122EPSS

CVE•added 2023/05/09 6:15 p.m.•296 views

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.01302EPSS

CVE•added 2025/06/10 5:22 p.m.•293 views

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

8.8CVSS8.8AI score0.25355EPSS

CVE•added 2018/12/12 12:29 a.m.•289 views

CVE-2018-8641

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wind...

7.8CVSS8.5AI score0.2752EPSS

CVE•added 2022/07/12 11:15 p.m.•288 views

CVE-2022-22049

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00235EPSS

CVE•added 2019/08/14 9:15 p.m.•286 views

CVE-2019-1182

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...

10CVSS9.7AI score0.09129EPSS

CVE•added 2021/09/15 12:15 p.m.•277 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

CVE•added 2023/05/09 6:15 p.m.•277 views

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability

6.5CVSS8AI score0.02256EPSS

CVE•added 2024/01/09 6:15 p.m.•276 views

CVE-2024-20674

Windows Kerberos Security Feature Bypass Vulnerability

8.8CVSS8.4AI score0.13849EPSS

CVE•added 2024/04/09 5:15 p.m.•276 views

CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.8482EPSS

CVE•added 2018/12/12 12:29 a.m.•275 views

CVE-2018-8639

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.4CVSS8.5AI score0.2752EPSS

CVE•added 2019/07/15 7:15 p.m.•274 views

CVE-2019-1006

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

7.5CVSS7.8AI score0.03045EPSS

CVE•added 2022/09/13 7:15 p.m.•274 views

CVE-2022-30170

Windows Credential Roaming Service Elevation of Privilege Vulnerability

7.3CVSS8.3AI score0.00826EPSS

CVE•added 2020/11/11 7:15 a.m.•273 views

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.14901EPSS

CVE•added 2023/11/14 6:15 p.m.•273 views

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.00134EPSS

CVE•added 2020/01/14 11:15 p.m.•270 views

CVE-2020-0611

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

7.5CVSS8.8AI score0.14967EPSS

CVE•added 2021/09/15 12:15 p.m.•270 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00307EPSS

CVE•added 2022/04/15 7:15 p.m.•270 views

CVE-2022-24528

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.01642EPSS

CVE•added 2024/08/13 6:15 p.m.•270 views

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.70132EPSS

CVE•added 2022/04/15 7:15 p.m.•269 views

CVE-2022-24500

Windows SMB Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.36017EPSS

CVE•added 2023/08/08 6:15 p.m.•269 views

CVE-2023-36876

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

7.1CVSS7AI score0.00102EPSS

CVE•added 2023/08/08 6:15 p.m.•268 views

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00105EPSS

CVE•added 2024/03/12 5:15 p.m.•268 views

CVE-2024-21438

Microsoft AllJoyn API Denial of Service Vulnerability

7.5CVSS7.6AI score0.03412EPSS

CVE•added 2020/07/14 11:15 p.m.•267 views

CVE-2020-1036

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040,...

9CVSS9.2AI score0.01059EPSS

CVE•added 2022/05/10 9:15 p.m.•265 views

CVE-2022-21972

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

9.3CVSS9AI score0.56635EPSS

CVE•added 2018/05/09 7:29 p.m.•264 views

CVE-2018-8166

7CVSS7.4AI score0.94013EPSS

CVE•added 2020/05/21 11:15 p.m.•264 views

CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.

7.8CVSS7.7AI score0.76178EPSS

CVE•added 2018/05/09 7:29 p.m.•263 views

CVE-2018-8124

7CVSS7.4AI score0.94013EPSS

CVE•added 2019/06/12 2:29 p.m.•263 views

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features.To exploit t...

5.9CVSS6.7AI score0.9061EPSS

CVE•added 2019/04/09 9:29 p.m.•262 views

CVE-2019-0796

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

5.5CVSS6.7AI score0.85917EPSS

CVE•added 2023/04/11 9:15 p.m.•260 views

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.06346EPSS

CVE•added 2019/04/09 3:29 a.m.•259 views

CVE-2019-0821

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704.

6.5CVSS6.8AI score0.14208EPSS

CVE•added 2025/03/11 5:16 p.m.•259 views

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

6.5CVSS6.5AI score0.29691EPSS

CVE•added 2021/08/12 6:15 p.m.•257 views

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

9.9CVSS8.8AI score0.09829EPSS

CVE•added 2022/05/10 9:15 p.m.•257 views

CVE-2022-26931

Windows Kerberos Elevation of Privilege Vulnerability

7.5CVSS8.5AI score0.00786EPSS

CVE•added 2018/05/09 7:29 p.m.•256 views

CVE-2018-8164

7.8CVSS7.4AI score0.94013EPSS

CVE•added 2020/07/14 11:15 p.m.•256 views

CVE-2020-1032

9CVSS9.2AI score0.01059EPSS

CVE•added 2024/01/09 6:15 p.m.•253 views

CVE-2024-20652

Windows HTML Platforms Security Feature Bypass Vulnerability

8.1CVSS8AI score0.03082EPSS

CVE•added 2019/04/09 9:29 p.m.•252 views

CVE-2019-0730

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

7.8CVSS6.7AI score0.85917EPSS

CVE•added 2023/04/11 9:15 p.m.•252 views

CVE-2023-28250

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.05623EPSS

CVE•added 2019/04/09 12:29 a.m.•250 views

CVE-2019-0704

6.5CVSS6.8AI score0.14208EPSS

CVE•added 2020/11/11 7:15 a.m.•250 views

CVE-2020-1599

Windows Spoofing Vulnerability

5.5CVSS7.2AI score0.05733EPSS

CVE•added 2020/07/14 11:15 p.m.•249 views

CVE-2020-1042

9CVSS9.2AI score0.01059EPSS

CVE•added 2024/08/13 6:15 p.m.•249 views

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS5.2AI score0.00458EPSS

CVE•added 2009/10/14 10:30 a.m.•248 views

CVE-2009-2524

Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a deni...

7.8CVSS6.5AI score0.46383EPSS

Total number of security vulnerabilities3446