Windows Server 2008@r2 Security Vulnerabilities and Issues — Page 60 of Windows Server 2008@r2 CVE List

Lucene search

MicrosoftWindows Server 2008r2

3052 matches found

CVE•added 2011/07/13 11:55 p.m.•46 views

CVE-2011-1884

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application th...

7.2CVSS6.5AI score0.0061EPSS

CVE•added 2015/04/14 8:59 p.m.•46 views

CVE-2015-0098

Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."

7.2CVSS6.7AI score0.00815EPSS

CVE•added 2025/07/08 5:15 p.m.•46 views

CVE-2025-48824

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•46 views

CVE-2025-49716

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

7.5CVSS6.4AI score0.09379EPSS

CVE•added 2011/04/13 6:55 p.m.•45 views

CVE-2011-0665

7.2CVSS6.5AI score0.00623EPSS

CVE•added 2011/04/13 8:26 p.m.•45 views

CVE-2011-1232

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer deref...

7.2CVSS6.4AI score0.00845EPSS

CVE•added 2011/04/13 8:26 p.m.•45 views

CVE-2011-1233

7.2CVSS6.4AI score0.00845EPSS

CVE•added 2011/06/16 8:55 p.m.•45 views

CVE-2011-1873

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, wh...

9.3CVSS7.6AI score0.33768EPSS

CVE•added 2012/03/13 9:55 p.m.•45 views

CVE-2012-0156

DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Appl...

4.3CVSS6.6AI score0.23239EPSS

CVE•added 2011/04/13 8:26 p.m.•44 views

CVE-2011-0674

7.2CVSS6.5AI score0.00623EPSS

CVE•added 2011/08/10 9:55 p.m.•44 views

CVE-2011-1263

Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."

4.3CVSS5.7AI score0.64343EPSS

CVE•added 2011/06/16 8:55 p.m.•44 views

CVE-2011-1264

Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certific...

4.3CVSS5.7AI score0.02977EPSS

CVE•added 2011/04/13 6:55 p.m.•43 views

CVE-2011-0666

7.2CVSS6.5AI score0.00623EPSS

CVE•added 2025/07/08 5:15 p.m.•42 views

CVE-2025-47971

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00079EPSS

CVE•added 2025/08/12 6:15 p.m.•42 views

CVE-2025-53766

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

9.8CVSS8AI score0.00167EPSS

CVE•added 2025/07/08 5:15 p.m.•41 views

CVE-2025-49683

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.

7.8CVSS7.2AI score0.00584EPSS

CVE•added 2025/07/08 5:16 p.m.•41 views

CVE-2025-49753

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•40 views

CVE-2025-47998

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00091EPSS

CVE•added 2025/08/12 6:15 p.m.•39 views

CVE-2025-53778

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

8.8CVSS7.3AI score0.00128EPSS

CVE•added 2025/07/08 5:15 p.m.•38 views

CVE-2025-49667

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

7.8CVSS6.6AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•35 views

CVE-2025-49686

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•32 views

CVE-2025-48815

Access of resource using incompatible type ('type confusion') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00164EPSS

CVE•added 2025/07/08 5:15 p.m.•32 views

CVE-2025-49669

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•32 views

CVE-2025-49670

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

6.5CVSS7.5AI score0.00074EPSS

CVE•added 2025/07/08 5:15 p.m.•32 views

CVE-2025-49722

Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.

5.7CVSS6.5AI score0.0067EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-47980

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

6.2CVSS6AI score0.00078EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-47986

Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

8.8CVSS7AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-48816

Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.

7.8CVSS6.8AI score0.0009EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-49659

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-49663

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•31 views

CVE-2025-49675

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

7.8CVSS6.9AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-47976

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

7.8CVSS7AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-47984

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

7.5CVSS6.1AI score0.0019EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-47987

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.

7.8CVSS7AI score0.0009EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-48814

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network.

7.5CVSS6.9AI score0.00112EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-48819

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

7.1CVSS6.5AI score0.00324EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-49658

Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.

5.5CVSS6.1AI score0.00056EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-49661

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•30 views

CVE-2025-49674

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:16 p.m.•30 views

CVE-2025-49730

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.

7.8CVSS6.4AI score0.0102EPSS

CVE•added 2025/07/08 5:16 p.m.•30 views

CVE-2025-49732

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

7.8CVSS7AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-47985

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

7.8CVSS6.5AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-48805

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.

7.8CVSS7.3AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-48806

Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.

7.8CVSS7.3AI score0.00066EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-48821

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

7.1CVSS7AI score0.00307EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-49657

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-49664

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally.

5.5CVSS6AI score0.00077EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-49668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

8.8CVSS7.5AI score0.00083EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-49671

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

6.5CVSS6.1AI score0.00074EPSS

CVE•added 2025/07/08 5:15 p.m.•29 views

CVE-2025-49678

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

7CVSS6.5AI score0.00047EPSS

Total number of security vulnerabilities3052