Windows Server 2008@- Security Vulnerabilities and Issues — Page 28 of Windows Server 2008@- CVE List

Lucene search

MicrosoftWindows Server 2008-

2587 matches found

CVE•added 2018/11/09 9:29 p.m.•104 views

CVE-2018-17612

Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or softwa...

7.5CVSS7.4AI score0.0101EPSS

CVE•added 2018/10/10 1:29 p.m.•104 views

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5.7AI score0.0092EPSS

CVE•added 2019/05/16 7:29 p.m.•104 views

CVE-2019-0758

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0882, CVE-2019-0961.

6.5CVSS6AI score0.25343EPSS

CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1017

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; o...

7.8CVSS7.8AI score0.00167EPSS

CVE•added 2019/07/15 7:15 p.m.•104 views

CVE-2019-1085

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

7.8CVSS7.6AI score0.00278EPSS

CVE•added 2019/11/12 7:15 p.m.•104 views

CVE-2019-1393

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434.

7.8CVSS7.6AI score0.00817EPSS

CVE•added 2020/04/15 3:15 p.m.•104 views

CVE-2020-1008

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992,...

9.3CVSS8AI score0.33652EPSS

CVE•added 2020/05/21 11:15 p.m.•104 views

CVE-2020-1175

9.3CVSS8AI score0.35463EPSS

CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00857EPSS

CVE•added 2022/10/11 7:15 p.m.•104 views

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass

7.5CVSS8AI score0.02213EPSS

CVE•added 2022/10/11 7:15 p.m.•104 views

CVE-2022-37982

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.04084EPSS

CVE•added 2022/10/11 7:15 p.m.•104 views

CVE-2022-37990

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00333EPSS

CVE•added 2022/09/13 7:15 p.m.•104 views

CVE-2022-38005

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00677EPSS

CVE•added 2022/10/11 7:15 p.m.•104 views

CVE-2022-38038

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.02128EPSS

CVE•added 2022/10/11 7:15 p.m.•104 views

CVE-2022-38051

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.16341EPSS

CVE•added 2023/01/10 10:15 p.m.•104 views

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability

7CVSS7AI score0.00275EPSS

CVE•added 2023/04/11 9:15 p.m.•104 views

CVE-2023-28256

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS6.8AI score0.00246EPSS

CVE•added 2024/07/09 5:15 p.m.•104 views

CVE-2024-38104

Windows Fax Service Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.04703EPSS

CVE•added 2024/12/12 2:4 a.m.•104 views

CVE-2024-49085

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.03526EPSS

CVE•added 2025/01/14 6:15 p.m.•104 views

CVE-2025-21251

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.01098EPSS

CVE•added 2025/04/08 6:15 p.m.•104 views

CVE-2025-26647

Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

8.8CVSS7AI score0.00143EPSS

CVE•added 2009/08/12 5:30 p.m.•103 views

CVE-2009-1930

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection ...

10CVSS7.5AI score0.47004EPSS

CVE•added 2018/03/14 5:29 p.m.•103 views

CVE-2018-0895

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.11699EPSS

CVE•added 2019/05/16 7:29 p.m.•103 views

CVE-2019-0901

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/08/14 9:15 p.m.•103 views

CVE-2019-1153

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker wou...

5.5CVSS6.7AI score0.04234EPSS

CVE•added 2019/09/11 10:15 p.m.•103 views

CVE-2019-1219

An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00955EPSS

CVE•added 2019/09/11 10:15 p.m.•103 views

CVE-2019-1249

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247,...

9.3CVSS8.2AI score0.35463EPSS

CVE•added 2019/09/11 10:15 p.m.•103 views

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00372EPSS

CVE•added 2019/10/10 2:15 p.m.•103 views

CVE-2019-1319

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00397EPSS

CVE•added 2020/04/15 3:15 p.m.•103 views

CVE-2020-0956

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957, CVE-2020-0958.

7.8CVSS8AI score0.00274EPSS

CVE•added 2020/04/15 3:15 p.m.•103 views

CVE-2020-0999

9.3CVSS8AI score0.33652EPSS

CVE•added 2020/07/14 11:15 p.m.•103 views

CVE-2020-1436

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerabilit...

8.8CVSS9.3AI score0.1002EPSS

CVE•added 2021/01/12 8:15 p.m.•103 views

CVE-2021-1653

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS

CVE•added 2021/01/12 8:15 p.m.•103 views

CVE-2021-1660

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/01/12 8:15 p.m.•103 views

CVE-2021-1699

Windows (modem.sys) Information Disclosure Vulnerability

5.5CVSS6.6AI score0.01126EPSS

CVE•added 2021/04/13 8:15 p.m.•103 views

CVE-2021-26415

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.14882EPSS

CVE•added 2021/04/13 8:15 p.m.•103 views

CVE-2021-28440

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00441EPSS

CVE•added 2021/06/08 11:15 p.m.•103 views

CVE-2021-31953

Windows Filter Manager Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.00653EPSS

CVE•added 2021/10/13 1:15 a.m.•103 views

CVE-2021-38662

Windows Fast FAT File System Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00606EPSS

CVE•added 2022/09/13 7:15 p.m.•103 views

CVE-2022-34730

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03465EPSS

CVE•added 2022/09/13 7:15 p.m.•103 views

CVE-2022-34732

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03465EPSS

CVE•added 2023/05/31 7:15 p.m.•103 views

CVE-2022-35752

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS

CVE•added 2022/08/09 8:15 p.m.•103 views

CVE-2022-35767

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.00843EPSS

CVE•added 2022/12/13 7:15 p.m.•103 views

CVE-2022-44678

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00359EPSS

CVE•added 2023/07/11 6:15 p.m.•103 views

CVE-2023-35366

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.02051EPSS

CVE•added 2024/06/11 5:15 p.m.•103 views

CVE-2024-30095

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01053EPSS

CVE•added 2024/12/12 2:4 a.m.•103 views

CVE-2024-49089

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.2CVSS7.2AI score0.05608EPSS

CVE•added 2009/09/08 10:30 p.m.•102 views

CVE-2009-1925

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecif...

10CVSS7.9AI score0.41899EPSS

CVE•added 2012/06/12 10:55 p.m.•102 views

CVE-2012-0173

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

9.3CVSS9.4AI score0.86215EPSS

CVE•added 2015/01/13 10:59 p.m.•102 views

CVE-2015-0014

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Se...

10CVSS7.9AI score0.80777EPSS

Total number of security vulnerabilities2587