Windows Server 2008@- Security Vulnerabilities and Issues — Page 13 of Windows Server 2008@- CVE List

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to cause a denial of service (daemon hang) via a web-service r...

5CVSS6.5AI score0.0806EPSS

CVE•added 2018/03/14 5:29 p.m.•145 views

CVE-2018-0878

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how X...

3.1CVSS5AI score0.32398EPSS

CVE•added 2019/03/06 12:0 a.m.•145 views

CVE-2019-0625

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599.

9.3CVSS8.4AI score0.32161EPSS

CVE•added 2019/04/09 9:29 p.m.•145 views

CVE-2019-0735

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.04145EPSS

CVE•added 2021/02/25 11:15 p.m.•145 views

CVE-2021-24094

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.14023EPSS

CVE•added 2021/07/16 9:15 p.m.•145 views

CVE-2021-34440

GDI+ Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00309EPSS

CVE•added 2022/06/15 10:15 p.m.•145 views

CVE-2022-30149

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.0158EPSS

CVE•added 2024/04/09 5:15 p.m.•145 views

CVE-2024-26183

Windows Kerberos Denial of Service Vulnerability

6.5CVSS7.3AI score0.13962EPSS

CVE•added 2024/04/09 5:15 p.m.•145 views

CVE-2024-26242

Windows Telephony Server Elevation of Privilege Vulnerability

7CVSS7.7AI score0.0017EPSS

CVE•added 2024/05/14 5:16 p.m.•145 views

CVE-2024-30006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS7.5AI score0.05325EPSS

CVE•added 2011/10/12 2:52 a.m.•144 views

CVE-2011-2003

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library ...

9.3CVSS7.6AI score0.70736EPSS

CVE•added 2017/03/17 12:59 a.m.•144 views

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via...

9.3CVSS7AI score0.39113EPSS

CVE•added 2019/01/08 9:29 p.m.•144 views

CVE-2019-0583

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS

CVE•added 2019/04/09 9:29 p.m.•144 views

CVE-2019-0877

7.8CVSS8.4AI score0.2548EPSS

CVE•added 2020/08/17 7:15 p.m.•144 views

CVE-2020-1577

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit the vulnerabil...

7.8CVSS6.9AI score0.17285EPSS

CVE•added 2022/04/15 7:15 p.m.•144 views

CVE-2022-26918

Windows Fax Compose Form Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01141EPSS

CVE•added 2022/08/09 8:15 p.m.•144 views

CVE-2022-30194

Windows WebBrowser Control Remote Code Execution Vulnerability

7.5CVSS8.7AI score0.0021EPSS

CVE•added 2023/01/10 10:15 p.m.•144 views

CVE-2023-21537

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00136EPSS

CVE•added 2023/08/08 6:15 p.m.•144 views

CVE-2023-36910

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.03462EPSS

CVE•added 2019/07/29 1:48 p.m.•143 views

CVE-2019-1100

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116.

6.5CVSS6.1AI score0.12437EPSS

CVE•added 2019/09/11 10:15 p.m.•143 views

CVE-2019-1280

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.2AI score0.19713EPSS

CVE•added 2021/08/12 6:15 p.m.•143 views

CVE-2021-34483

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.8AI score0.00324EPSS

CVE•added 2021/09/15 12:15 p.m.•143 views

CVE-2021-38667

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0043EPSS

CVE•added 2022/01/11 9:15 p.m.•143 views

CVE-2022-21885

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.00492EPSS

CVE•added 2022/04/15 7:15 p.m.•143 views

CVE-2022-26813

Windows DNS Server Remote Code Execution Vulnerability

9CVSS6.9AI score0.0895EPSS

CVE•added 2022/04/15 7:15 p.m.•143 views

CVE-2022-26917

Windows Fax Compose Form Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01141EPSS

CVE•added 2022/06/15 10:15 p.m.•143 views

CVE-2022-30147

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.01941EPSS

CVE•added 2022/07/12 11:15 p.m.•143 views

CVE-2022-30206

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.15107EPSS

CVE•added 2023/01/10 10:15 p.m.•143 views

CVE-2023-21543

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.0191EPSS

CVE•added 2023/06/14 12:15 a.m.•143 views

CVE-2023-29358

Windows GDI Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.02601EPSS

CVE•added 2024/04/09 5:15 p.m.•143 views

CVE-2024-26205

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01643EPSS

CVE•added 2024/04/09 5:15 p.m.•143 views

CVE-2024-26232

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3CVSS8.6AI score0.00446EPSS

CVE•added 2024/04/09 5:15 p.m.•143 views

CVE-2024-26244

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01581EPSS

CVE•added 2021/07/14 6:15 p.m.•142 views

CVE-2021-33756

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01128EPSS

CVE•added 2021/07/16 9:15 p.m.•142 views

CVE-2021-34441

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.00813EPSS

CVE•added 2022/07/12 11:15 p.m.•142 views

CVE-2022-30211

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.00993EPSS

CVE•added 2022/09/13 7:15 p.m.•142 views

CVE-2022-35835

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.03169EPSS

CVE•added 2022/10/11 7:15 p.m.•142 views

CVE-2022-38047

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS

CVE•added 2023/02/14 8:15 p.m.•142 views

CVE-2023-21689

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.29667EPSS

CVE•added 2025/05/13 5:16 p.m.•142 views

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.8CVSS7.5AI score0.04825EPSS

CVE•added 2022/01/11 9:15 p.m.•141 views

CVE-2022-21890

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.10382EPSS

CVE•added 2023/01/10 10:15 p.m.•141 views

CVE-2023-21555

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00171EPSS

CVE•added 2023/03/14 5:15 p.m.•141 views

CVE-2023-23394

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

5.5CVSS5.5AI score0.0054EPSS

CVE•added 2023/04/11 9:15 p.m.•141 views

CVE-2023-24912

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.03462EPSS

CVE•added 2018/07/11 12:29 a.m.•140 views

CVE-2018-8206

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

7.8CVSS6.4AI score0.12158EPSS

Total number of security vulnerabilities2548