Windows Server 2008@* Security Vulnerabilities and Issues — Page 40 of Windows Server 2008@* CVE List

Lucene search

MicrosoftWindows Server 2008*

2508 matches found

CVE•added 2020/03/12 4:15 p.m.•75 views

CVE-2020-0885

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.

4.3CVSS5.9AI score0.08498EPSS

CVE•added 2020/05/21 11:15 p.m.•75 views

CVE-2020-1078

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS8.5AI score0.0038EPSS

CVE•added 2024/10/08 6:15 p.m.•75 views

CVE-2024-38149

BranchCache Denial of Service Vulnerability

7.5CVSS7.9AI score0.18667EPSS

CVE•added 2024/09/10 5:15 p.m.•75 views

CVE-2024-38256

Windows Kernel-Mode Driver Information Disclosure Vulnerability

5.5CVSS7AI score0.00227EPSS

CVE•added 2024/10/08 6:15 p.m.•75 views

CVE-2024-43515

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

7.5CVSS8.2AI score0.06576EPSS

CVE•added 2024/10/08 6:15 p.m.•75 views

CVE-2024-43518

Windows Telephony Server Remote Code Execution Vulnerability

8.8CVSS9.1AI score0.05059EPSS

CVE•added 2025/01/14 6:15 p.m.•75 views

CVE-2025-21265

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00132EPSS

CVE•added 2025/01/14 6:15 p.m.•75 views

CVE-2025-21320

Windows Kernel Memory Information Disclosure Vulnerability

5.5CVSS5.3AI score0.00092EPSS

CVE•added 2025/03/11 5:16 p.m.•75 views

CVE-2025-24072

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

7.8CVSS7.2AI score0.0009EPSS

CVE•added 2025/04/08 6:15 p.m.•75 views

CVE-2025-27469

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

7.5CVSS7AI score0.12218EPSS

CVE•added 2011/07/13 10:55 p.m.•74 views

CVE-2011-1281

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a p...

7.2CVSS6.5AI score0.00773EPSS

CVE•added 2017/07/11 9:29 p.m.•74 views

CVE-2017-8467

Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Ele...

7CVSS6.9AI score0.00972EPSS

CVE•added 2017/07/11 9:29 p.m.•74 views

CVE-2017-8561

Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerabili...

7CVSS6.6AI score0.00359EPSS

CVE•added 2017/09/13 1:29 a.m.•74 views

CVE-2017-8720

The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k compon...

7.8CVSS7.2AI score0.01052EPSS

CVE•added 2019/11/12 7:15 p.m.•74 views

CVE-2019-1434

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1393, CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408.

7.8CVSS7.6AI score0.00817EPSS

CVE•added 2020/02/11 10:15 p.m.•74 views

CVE-2020-0658

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.00571EPSS

CVE•added 2020/02/11 10:15 p.m.•74 views

CVE-2020-0723

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0724, CVE...

7.8CVSS7.7AI score0.00549EPSS

CVE•added 2020/02/11 10:15 p.m.•74 views

CVE-2020-0736

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.

5.5CVSS6AI score0.00996EPSS

CVE•added 2020/02/11 10:15 p.m.•74 views

CVE-2020-0748

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addre...

5.5CVSS5.2AI score0.00996EPSS

CVE•added 2020/07/14 11:15 p.m.•74 views

CVE-2020-1360

An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS

CVE•added 2024/09/10 5:15 p.m.•74 views

CVE-2024-38239

Windows Kerberos Elevation of Privilege Vulnerability

7.2CVSS8.1AI score0.11734EPSS

CVE•added 2025/01/14 6:15 p.m.•74 views

CVE-2025-21236

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.00461EPSS

CVE•added 2025/03/11 5:16 p.m.•74 views

CVE-2025-24987

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

6.8CVSS6.5AI score0.00118EPSS

CVE•added 2025/04/08 6:15 p.m.•74 views

CVE-2025-26667

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

6.5CVSS6.7AI score0.00082EPSS

CVE•added 2025/04/08 6:15 p.m.•74 views

CVE-2025-26687

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

7.5CVSS7.5AI score0.0006EPSS

CVE•added 2025/06/10 5:22 p.m.•74 views

CVE-2025-33070

Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.

8.1CVSS8AI score0.00203EPSS

CVE•added 2009/11/11 7:30 p.m.•73 views

CVE-2009-2514

win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing ...

9.3CVSS7.1AI score0.81818EPSS

CVE•added 2010/02/10 6:30 p.m.•73 views

CVE-2010-0240

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code ...

10CVSS7.4AI score0.55484EPSS

CVE•added 2012/12/12 12:55 a.m.•73 views

CVE-2012-2556

The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary cod...

9.3CVSS7.5AI score0.43491EPSS

CVE•added 2013/07/10 3:46 a.m.•73 views

CVE-2013-1345

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privi...

7.2CVSS6.3AI score0.03291EPSS

CVE•added 2015/12/09 11:59 a.m.•73 views

CVE-2015-6128

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."

7.2CVSS7AI score0.43967EPSS

CVE•added 2017/03/17 12:59 a.m.•73 views

CVE-2017-0061

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management ...

5.3CVSS5.4AI score0.21453EPSS

CVE•added 2017/03/17 12:59 a.m.•73 views

CVE-2017-0088

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."

9.3CVSS7.3AI score0.33974EPSS

CVE•added 2017/06/15 1:29 a.m.•73 views

CVE-2017-0298

A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker to...

7.3CVSS5.8AI score0.00872EPSS

CVE•added 2019/07/29 2:10 p.m.•73 views

CVE-2019-1116

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101.

6.5CVSS6.1AI score0.12437EPSS

CVE•added 2019/11/12 7:15 p.m.•73 views

CVE-2019-1409

An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'.

5.5CVSS6.6AI score0.00655EPSS

CVE•added 2019/11/12 7:15 p.m.•73 views

CVE-2019-1412

An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka 'OpenType Font Driver Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.0064EPSS

CVE•added 2020/02/11 10:15 p.m.•73 views

CVE-2020-0725

7.8CVSS7.7AI score0.00549EPSS

CVE•added 2020/02/11 10:15 p.m.•73 views

CVE-2020-0752

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735.

7.8CVSS8.1AI score0.00511EPSS

CVE•added 2023/07/11 6:15 p.m.•73 views

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS8.1AI score0.00226EPSS

CVE•added 2024/09/10 5:15 p.m.•73 views

CVE-2024-38247

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00588EPSS

CVE•added 2024/09/10 5:15 p.m.•73 views

CVE-2024-38249

Windows Graphics Component Elevation of Privilege Vulnerability