Windows Server 2008@r2 Security Vulnerabilities and Issues — Page 11 of Windows Server 2008@r2 CVE List

Lucene search

MicrosoftWindows Server 2008r2

3008 matches found

CVE•added 2020/10/16 11:15 p.m.•175 views

CVE-2020-16933

A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file co...

8.8CVSS6.6AI score0.0284EPSS

CVE•added 2022/07/12 11:15 p.m.•175 views

CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

7.5CVSS7.9AI score0.42999EPSS

CVE•added 2018/11/14 1:29 a.m.•174 views

CVE-2018-8256

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, ...

9.3CVSS7.7AI score0.17753EPSS

CVE•added 2022/10/11 7:15 p.m.•174 views

CVE-2022-37986

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00258EPSS

CVE•added 2022/10/11 7:15 p.m.•174 views

CVE-2022-38044

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.24597EPSS

CVE•added 2023/11/14 6:15 p.m.•174 views

CVE-2023-36395

Windows Deployment Services Denial of Service Vulnerability

7.5CVSS8.4AI score0.0122EPSS

CVE•added 2025/01/14 6:15 p.m.•174 views

CVE-2025-21302

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.00461EPSS

CVE•added 2022/11/09 10:15 p.m.•173 views

CVE-2022-41039

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00147EPSS

CVE•added 2023/02/14 8:15 p.m.•173 views

CVE-2023-21690

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.22726EPSS

CVE•added 2023/05/09 6:15 p.m.•173 views

CVE-2023-28283

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.00681EPSS

CVE•added 2023/06/14 12:15 a.m.•173 views

CVE-2023-32015

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.02721EPSS

CVE•added 2025/01/14 6:15 p.m.•173 views

CVE-2025-21263

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00132EPSS

CVE•added 2022/05/10 9:15 p.m.•172 views

CVE-2022-23270

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

9.3CVSS9AI score0.54499EPSS

CVE•added 2022/09/13 7:15 p.m.•172 views

CVE-2022-34729

Windows GDI Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.03937EPSS

CVE•added 2022/10/11 7:15 p.m.•172 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00447EPSS

CVE•added 2023/04/11 9:15 p.m.•172 views

CVE-2023-28220

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.05722EPSS

CVE•added 2022/04/15 7:15 p.m.•171 views

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00378EPSS

CVE•added 2022/09/13 7:15 p.m.•171 views

CVE-2022-37958

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

8.1CVSS8.8AI score0.07821EPSS

CVE•added 2023/03/14 5:15 p.m.•171 views

CVE-2023-23414

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

7.1CVSS7.2AI score0.00164EPSS

CVE•added 2024/04/09 5:16 p.m.•171 views

CVE-2024-29066

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

7.2CVSS7.8AI score0.00642EPSS

CVE•added 2017/08/08 9:29 p.m.•170 views

CVE-2017-0174

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS De...

6.5CVSS6.9AI score0.00483EPSS

CVE•added 2022/04/15 7:15 p.m.•170 views

CVE-2022-24499

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00285EPSS

CVE•added 2022/10/11 7:15 p.m.•170 views

CVE-2022-38029

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.6AI score0.04077EPSS

CVE•added 2023/03/14 5:15 p.m.•170 views

CVE-2023-24869

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.0116EPSS

CVE•added 2023/11/14 6:15 p.m.•170 views

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability

7.2CVSS8.3AI score0.00319EPSS

CVE•added 2024/04/09 5:15 p.m.•170 views

CVE-2024-26179

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01643EPSS

CVE•added 2019/08/14 9:15 p.m.•169 views

CVE-2019-1155

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS

CVE•added 2019/09/11 10:15 p.m.•169 views

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

6.5CVSS6.2AI score0.27638EPSS

CVE•added 2020/10/16 11:15 p.m.•169 views

CVE-2020-16923

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

7.8CVSS8.3AI score0.08517EPSS

CVE•added 2022/07/12 11:15 p.m.•169 views

CVE-2022-22027

Windows Fax Service Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.0224EPSS

CVE•added 2022/04/15 7:15 p.m.•169 views

CVE-2022-26803

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00583EPSS

CVE•added 2022/06/15 10:15 p.m.•169 views

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00326EPSS

CVE•added 2022/10/11 7:15 p.m.•169 views

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.07875EPSS

CVE•added 2023/01/10 10:15 p.m.•169 views

CVE-2023-21776

Windows Kernel Information Disclosure Vulnerability

5.5CVSS5.5AI score0.00669EPSS

CVE•added 2024/04/09 5:15 p.m.•169 views

CVE-2024-26158

Microsoft Install Service Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.06389EPSS

CVE•added 2017/05/12 2:29 p.m.•168 views

CVE-2017-0272

The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it ...

9.3CVSS7.7AI score0.05522EPSS

CVE•added 2022/07/12 11:15 p.m.•168 views

CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

6.9CVSS7.3AI score0.00407EPSS

CVE•added 2022/05/10 9:15 p.m.•168 views

CVE-2022-29141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.09654EPSS

CVE•added 2022/10/11 7:15 p.m.•168 views

CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.07088EPSS

CVE•added 2024/04/09 5:15 p.m.•168 views

CVE-2024-26195

DHCP Server Service Remote Code Execution Vulnerability

7.2CVSS7.9AI score0.03609EPSS

CVE•added 2018/10/10 1:29 p.m.•167 views

CVE-2018-8413

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Serve...

9.3CVSS7.9AI score0.52893EPSS

CVE•added 2022/06/15 10:15 p.m.•167 views

CVE-2022-30146

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.04244EPSS

CVE•added 2023/01/10 10:15 p.m.•167 views

CVE-2023-21732

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00887EPSS

CVE•added 2015/03/06 5:59 p.m.•166 views

CVE-2015-1637

Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for ...

4.3CVSS6.2AI score0.92473EPSS

CVE•added 2018/11/14 1:29 a.m.•166 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wi...

5.5CVSS6.7AI score0.00704EPSS

CVE•added 2021/05/11 7:15 p.m.•166 views

CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

7.4CVSS7.6AI score0.12012EPSS

CVE•added 2021/07/16 9:15 p.m.•166 views

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

8.8CVSS8AI score0.01423EPSS

CVE•added 2021/11/10 1:19 a.m.•166 views

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability