Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftWindows Server 2008r2

3008 matches found

CVE
CVE•added 2023/05/31 7:15 p.m.•91 views

CVE-2022-35753

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•91 views

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00106EPSS
CVE
CVE•added 2023/02/14 8:15 p.m.•91 views

CVE-2023-21800

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00808EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•91 views

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability

7.5CVSS7.6AI score0.00432EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•91 views

CVE-2023-35318

Remote Procedure Call Runtime Denial of Service Vulnerability

6.5CVSS7.8AI score0.03672EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•91 views

CVE-2023-35344

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS8.1AI score0.00226EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•91 views

CVE-2023-35345

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS8.1AI score0.00226EPSS
CVE
CVE•added 2023/10/10 6:15 p.m.•91 views

CVE-2023-36790

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0019EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•91 views

CVE-2024-38019

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

7.2CVSS8.3AI score0.13017EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•91 views

CVE-2024-38051

Windows Graphics Component Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01308EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•91 views

CVE-2024-38073

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5CVSS8.5AI score0.14568EPSS
CVE
CVE•added 2024/11/12 6:15 p.m.•91 views

CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00408EPSS
CVE
CVE•added 2024/12/12 2:4 a.m.•91 views

CVE-2024-49104

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.02689EPSS
CVE
CVE•added 2025/01/14 6:15 p.m.•91 views

CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00132EPSS
CVE
CVE•added 2025/01/14 6:15 p.m.•91 views

CVE-2025-21285

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.03034EPSS
CVE
CVE•added 2025/02/11 6:15 p.m.•91 views

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00149EPSS
CVE
CVE•added 2025/01/14 6:16 p.m.•91 views

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.02401EPSS
CVE
CVE•added 2015/12/09 11:59 a.m.•90 views

CVE-2015-6132

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windo...

7.2CVSS7AI score0.74499EPSS
CVE
CVE•added 2017/04/12 2:59 p.m.•90 views

CVE-2017-0058

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure V...

4.7CVSS5AI score0.16494EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•90 views

CVE-2017-0103

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registry objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Registry Elevation of Privilege Vulnerability."

7CVSS6AI score0.01188EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•90 views

CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-...

4.3CVSS4.5AI score0.13744EPSS
CVE
CVE•added 2017/04/12 2:59 p.m.•90 views

CVE-2017-0163

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-01...

7.6CVSS7.9AI score0.00421EPSS
CVE
CVE•added 2017/06/15 1:29 a.m.•90 views

CVE-2017-0285

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer allows improper disclosure of ...

5CVSS4.9AI score0.17084EPSS
CVE
CVE•added 2018/01/04 2:29 p.m.•90 views

CVE-2018-0788

The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of Pri...

7CVSS6AI score0.00765EPSS
CVE
CVE•added 2018/03/14 5:29 p.m.•90 views

CVE-2018-0926

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

5.5CVSS4.7AI score0.06807EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•90 views

CVE-2019-1358

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.

9.3CVSS8.8AI score0.58897EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•90 views

CVE-2019-1406

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

9.3CVSS8.9AI score0.33652EPSS
CVE
CVE•added 2020/02/11 10:15 p.m.•90 views

CVE-2020-0691

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020...

7.8CVSS7.7AI score0.00549EPSS
CVE
CVE•added 2020/02/11 10:15 p.m.•90 views

CVE-2020-0720

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE...

7.8CVSS7.7AI score0.00549EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•90 views

CVE-2020-0843

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS6.5AI score0.00646EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•90 views

CVE-2020-0881

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.

9.3CVSS8.8AI score0.5256EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•90 views

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.

5.5CVSS5.6AI score0.24868EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•90 views

CVE-2020-1314

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.13831EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•90 views

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

5.5CVSS7AI score0.00606EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•90 views

CVE-2021-1693

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•90 views

CVE-2021-28328

Windows DNS Information Disclosure Vulnerability

6.5CVSS7.1AI score0.11531EPSS
CVE
CVE•added 2021/12/15 3:15 p.m.•90 views

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00222EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•90 views

CVE-2022-41116

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

5.9CVSS6AI score0.00075EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•90 views

CVE-2023-33164

Remote Procedure Call Runtime Denial of Service Vulnerability

6.5CVSS7.8AI score0.03672EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•90 views

CVE-2023-35338

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

7.5CVSS8.4AI score0.03356EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•90 views

CVE-2024-38068

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

7.5CVSS8.4AI score0.23444EPSS
CVE
CVE•added 2024/08/13 6:15 p.m.•90 views

CVE-2024-38120

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS9AI score0.06538EPSS
CVE
CVE•added 2025/02/11 6:15 p.m.•90 views

CVE-2025-21200

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00381EPSS
CVE
CVE•added 2025/04/08 6:15 p.m.•90 views

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.00051EPSS
CVE
CVE•added 2011/06/16 8:55 p.m.•89 views

CVE-2011-1249

The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges v...

7.2CVSS6.3AI score0.39393EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•89 views

CVE-2017-0042

Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windows...

3.1CVSS3.4AI score0.19033EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•89 views

CVE-2017-0084

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows ...

9.3CVSS7.4AI score0.67088EPSS
CVE
CVE•added 2017/03/17 12:59 a.m.•89 views

CVE-2017-0090

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2...

9.3CVSS7.4AI score0.67088EPSS
CVE
CVE•added 2017/05/12 2:29 p.m.•89 views

CVE-2017-0190

The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, ak...

4.4CVSS5.2AI score0.01149EPSS
CVE
CVE•added 2017/04/12 2:59 p.m.•89 views

CVE-2017-0192

The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially...

4.3CVSS5.4AI score0.22919EPSS
Total number of security vulnerabilities3008