Windows Server 2008@* Security Vulnerabilities and Issues — Page 19 of Windows Server 2008@* CVE List

Lucene search

MicrosoftWindows Server 2008*

2508 matches found

CVE•added 2010/02/10 6:30 p.m.•123 views

CVE-2010-0231

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain ac...

10CVSS9AI score0.51842EPSS

CVE•added 2011/12/30 7:55 p.m.•123 views

CVE-2011-5046

The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers...

9.3CVSS7.7AI score0.74086EPSS

CVE•added 2017/07/11 9:29 p.m.•123 views

CVE-2017-8565

Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka "Windows PowerShell ...

9.3CVSS7.3AI score0.38264EPSS

CVE•added 2019/03/06 12:0 a.m.•123 views

CVE-2019-0615

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS

CVE•added 2019/03/06 12:0 a.m.•123 views

CVE-2019-0663

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from C...

5.5CVSS6.3AI score0.01706EPSS

CVE•added 2019/04/09 3:29 a.m.•123 views

CVE-2019-0775

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0782.

4.7CVSS5.6AI score0.00908EPSS

CVE•added 2019/04/09 3:29 a.m.•123 views

CVE-2019-0784

A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, aka 'Windows ActiveX Remote Code Execution Vulnerability'.

7.6CVSS8.3AI score0.03401EPSS

CVE•added 2019/05/16 7:29 p.m.•123 views

CVE-2019-0902

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2020/05/21 11:15 p.m.•123 views

CVE-2020-1113

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.

9.3CVSS8.2AI score0.01508EPSS

CVE•added 2021/07/14 6:15 p.m.•123 views

CVE-2021-33752

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01341EPSS

CVE•added 2021/12/15 3:15 p.m.•123 views

CVE-2021-41333

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.7AI score0.00545EPSS

CVE•added 2022/01/11 9:15 p.m.•123 views

CVE-2022-21880

Windows GDI+ Information Disclosure Vulnerability

7.8CVSS8.1AI score0.16624EPSS

CVE•added 2023/06/14 12:15 a.m.•123 views

CVE-2023-32017

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.00138EPSS

CVE•added 2023/08/08 6:15 p.m.•123 views

CVE-2023-35377

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6.5CVSS7.7AI score0.00951EPSS

CVE•added 2024/10/08 6:15 p.m.•123 views

CVE-2024-43520

Windows Kernel Denial of Service Vulnerability

5CVSS6.5AI score0.00276EPSS

CVE•added 2010/12/16 7:33 p.m.•122 views

CVE-2010-3956

The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenTy...

9.3CVSS6.3AI score0.404EPSS

CVE•added 2019/05/16 7:29 p.m.•122 views

CVE-2019-0889

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/11/12 7:15 p.m.•122 views

CVE-2019-1419

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1456.

8.8CVSS9.3AI score0.23721EPSS

CVE•added 2020/01/14 11:15 p.m.•122 views

CVE-2020-0626

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS

CVE•added 2020/01/14 11:15 p.m.•122 views

CVE-2020-0632

7.8CVSS7.7AI score0.00511EPSS

CVE•added 2021/07/14 6:15 p.m.•122 views

CVE-2021-34516

Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.02117EPSS

CVE•added 2021/11/10 1:19 a.m.•122 views

CVE-2021-41367

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00197EPSS

CVE•added 2022/04/15 7:15 p.m.•122 views

CVE-2022-26798

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00583EPSS

CVE•added 2023/03/14 5:15 p.m.•122 views

CVE-2023-24862

Windows Secure Channel Denial of Service Vulnerability

5.5CVSS5.6AI score0.00166EPSS

CVE•added 2023/07/11 6:15 p.m.•122 views

CVE-2023-35365

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.0231EPSS

CVE•added 2023/08/08 6:15 p.m.•122 views

CVE-2023-38254

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6.5CVSS7.7AI score0.00807EPSS

CVE•added 2024/05/14 5:17 p.m.•122 views

CVE-2024-30050

Windows Mark of the Web Security Feature Bypass Vulnerability

5.4CVSS6.2AI score0.08246EPSS

CVE•added 2024/08/13 6:15 p.m.•122 views

CVE-2024-38140

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

9.8CVSS9.8AI score0.11372EPSS

CVE•added 2025/04/08 6:15 p.m.•122 views

CVE-2025-21204

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.00597EPSS

CVE•added 2025/01/14 6:15 p.m.•122 views

CVE-2025-21329

MapUrlToZone Security Feature Bypass Vulnerability

4.3CVSS4.6AI score0.00103EPSS

CVE•added 2012/11/14 12:55 a.m.•121 views

CVE-2012-1528

Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcas...

9.3CVSS6.6AI score0.46648EPSS

CVE•added 2019/04/09 9:29 p.m.•121 views

CVE-2019-0838

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839.

7.8CVSS5.7AI score0.00695EPSS

CVE•added 2019/12/10 10:15 p.m.•121 views

CVE-2019-1453

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.

7.5CVSS7.6AI score0.10033EPSS

CVE•added 2019/12/10 10:15 p.m.•121 views

CVE-2019-1467

6.5CVSS6.7AI score0.26055EPSS

CVE•added 2020/05/21 11:15 p.m.•121 views

CVE-2020-1112

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

9.9CVSS8.5AI score0.01365EPSS

CVE•added 2021/07/14 6:15 p.m.•121 views

CVE-2021-34496

Windows GDI Information Disclosure Vulnerability

5.5CVSS6.6AI score0.02886EPSS

CVE•added 2021/08/12 6:15 p.m.•121 views

CVE-2021-36927

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00239EPSS

CVE•added 2022/06/15 10:15 p.m.•121 views

CVE-2022-30155

Windows Kernel Denial of Service Vulnerability

7.1CVSS6.7AI score0.03765EPSS

CVE•added 2022/11/09 10:15 p.m.•121 views

CVE-2022-41053

Windows Kerberos Denial of Service Vulnerability

7.5CVSS7.9AI score0.02817EPSS

CVE•added 2022/11/09 10:15 p.m.•121 views

CVE-2022-41057

Windows HTTP.sys Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.01091EPSS

CVE•added 2022/11/09 10:15 p.m.•121 views

CVE-2022-41109

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.05827EPSS

CVE•added 2023/01/10 10:15 p.m.•121 views

CVE-2023-21760

Windows Print Spooler Elevation of Privilege Vulnerability

7.1CVSS7AI score0.00217EPSS

CVE•added 2023/01/10 10:15 p.m.•121 views

CVE-2023-21774

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00656EPSS

CVE•added 2023/05/09 6:15 p.m.•121 views

CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

7.5CVSS7.5AI score0.03509EPSS

CVE•added 2023/06/14 12:15 a.m.•121 views

CVE-2023-29364

Windows Authentication Elevation of Privilege Vulnerability

7CVSS8.2AI score0.00386EPSS

CVE•added 2023/08/08 6:15 p.m.•121 views

CVE-2023-36909

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6.5CVSS7.7AI score0.00466EPSS

CVE•added 2024/05/14 5:16 p.m.•121 views

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability

8.1CVSS6.9AI score0.04278EPSS

CVE•added 2016/08/09 9:59 p.m.•120 views

CVE-2016-3304

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrar...

9.3CVSS7.8AI score0.49401EPSS

CVE•added 2018/05/09 7:29 p.m.•120 views

CVE-2018-0959

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serv...

7.6CVSS7.9AI score0.2488EPSS

CVE•added 2019/03/06 12:0 a.m.•120 views

CVE-2019-0600

An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.

4.7CVSS6.2AI score0.00549EPSS

Total number of security vulnerabilities2508