Windows Server 2008@- Security Vulnerabilities and Issues — Page 43 of Windows Server 2008@- CVE List

Lucene search

MicrosoftWindows Server 2008-

2587 matches found

CVE•added 2019/07/29 2:10 p.m.•74 views

CVE-2019-1116

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101.

6.5CVSS6.1AI score0.12437EPSS

CVE•added 2019/08/14 9:15 p.m.•74 views

CVE-2019-1169

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

7.8CVSS7.7AI score0.01478EPSS

CVE•added 2019/11/12 7:15 p.m.•74 views

CVE-2019-1412

An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka 'OpenType Font Driver Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.0064EPSS

CVE•added 2019/11/12 7:15 p.m.•74 views

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS8.5AI score0.0038EPSS

CVE•added 2020/02/11 10:15 p.m.•74 views

CVE-2020-0752

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735.

7.8CVSS8.1AI score0.00511EPSS

CVE•added 2020/03/12 4:15 p.m.•74 views

CVE-2020-0779

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.

5.5CVSS6.4AI score0.00646EPSS

CVE•added 2023/07/11 6:15 p.m.•74 views

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS8.1AI score0.00226EPSS

CVE•added 2024/09/10 5:15 p.m.•74 views

CVE-2024-38249

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.01311EPSS

CVE•added 2024/10/08 6:15 p.m.•74 views

CVE-2024-43564

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS9.1AI score0.05181EPSS

CVE•added 2025/01/14 6:15 p.m.•74 views

CVE-2025-21277

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.04371EPSS

CVE•added 2025/01/14 6:15 p.m.•74 views

CVE-2025-21288

Windows COM Server Information Disclosure Vulnerability

6.5CVSS6.3AI score0.00101EPSS

CVE•added 2025/01/14 6:15 p.m.•74 views

CVE-2025-21289

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.01098EPSS

CVE•added 2025/04/08 6:15 p.m.•74 views

CVE-2025-26641

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

7.5CVSS7AI score0.10905EPSS

CVE•added 2014/11/11 10:55 p.m.•73 views

CVE-2014-6318

The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid credenti...

4.3CVSS6.7AI score0.34678EPSS

CVE•added 2015/08/15 12:59 a.m.•73 views

CVE-2015-2458

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted Ope...

9.3CVSS7.3AI score0.54061EPSS

CVE•added 2015/12/09 11:59 a.m.•73 views

CVE-2015-6171

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory El...

7.2CVSS6.2AI score0.0345EPSS

CVE•added 2017/06/15 1:29 a.m.•73 views

CVE-2017-8482

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS

CVE•added 2017/06/15 1:29 a.m.•73 views

CVE-2017-8489

5CVSS4.8AI score0.14765EPSS

Web

CVE•added 2017/09/13 1:29 a.m.•73 views

CVE-2017-8680

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability...

5.5CVSS5.1AI score0.26895EPSS

CVE•added 2018/08/15 5:29 p.m.•73 views

CVE-2018-8346

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8345.

9.3CVSS7.2AI score0.29608EPSS

CVE•added 2018/12/12 12:29 a.m.•73 views

CVE-2018-8622

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS6.5AI score0.01202EPSS

CVE•added 2019/11/12 7:15 p.m.•73 views

CVE-2019-1432

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1411.

6.5CVSS7.1AI score0.26055EPSS

CVE•added 2020/05/21 11:15 p.m.•73 views

CVE-2020-1081

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00231EPSS

CVE•added 2020/05/21 11:15 p.m.•73 views

CVE-2020-1141

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963...

5.5CVSS6.5AI score0.2819EPSS

CVE•added 2024/10/08 6:15 p.m.•73 views

CVE-2024-43547

Windows Kerberos Information Disclosure Vulnerability

6.5CVSS7AI score0.00221EPSS

CVE•added 2024/11/12 6:15 p.m.•73 views

CVE-2024-43622

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01975EPSS

CVE•added 2024/12/12 2:4 a.m.•73 views

CVE-2024-49090

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00464EPSS

CVE•added 2025/02/11 6:15 p.m.•73 views

CVE-2025-21201

Windows Telephony Server Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00322EPSS

CVE•added 2025/01/14 6:15 p.m.•73 views

CVE-2025-21246

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.0052EPSS

CVE•added 2025/01/14 6:15 p.m.•73 views

CVE-2025-21287

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0018EPSS

CVE•added 2025/05/13 5:15 p.m.•73 views

CVE-2025-29837

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.

5.5CVSS6.7AI score0.00102EPSS

CVE•added 2015/04/14 8:59 p.m.•72 views

CVE-2015-1644

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted app...

7.2CVSS6.2AI score0.02675EPSS

CVE•added 2015/06/10 1:59 a.m.•72 views

CVE-2015-1725

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted ...

7.2CVSS6.8AI score0.05408EPSS

CVE•added 2015/08/15 12:59 a.m.•72 views

CVE-2015-2472

Remote Desktop Session Host (RDSH) in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

4.3CVSS6.2AI score0.03698EPSS

CVE•added 2015/08/15 12:59 a.m.•72 views

CVE-2015-2476

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sni...

2.6CVSS6.4AI score0.27097EPSS

CVE•added 2016/10/14 2:59 a.m.•72 views

CVE-2016-3376

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privi...

9.3CVSS7AI score0.11906EPSS

CVE•added 2017/06/15 1:29 a.m.•72 views

CVE-2017-8488

5CVSS4.8AI score0.14765EPSS

Web

CVE•added 2019/06/12 2:29 p.m.•72 views

CVE-2019-1016

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit ...

6.5CVSS5.6AI score0.07622EPSS

CVE•added 2019/11/12 7:15 p.m.•72 views

CVE-2019-1418

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

3.3CVSS5.8AI score0.0141EPSS

CVE•added 2020/02/11 10:15 p.m.•72 views

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Info...

5.5CVSS6.3AI score0.00983EPSS

CVE•added 2020/03/12 4:15 p.m.•72 views

CVE-2020-0882

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880.

6.5CVSS6.2AI score0.29411EPSS

CVE•added 2024/10/08 6:15 p.m.•72 views

CVE-2024-43453

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS9.1AI score0.05878EPSS

CVE•added 2024/10/08 6:15 p.m.•72 views

CVE-2024-43545

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

7.5CVSS8.2AI score0.19035EPSS

CVE•added 2024/10/08 6:15 p.m.•72 views

CVE-2024-43549

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability