WS
Product
Windows Server 2008 R2 Service Pack 1
by Microsoft · last CVE Jan 13, 2026
On CISA KEVExploited in the wildRansomware-linked
254
CVEs
62
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 189Medium 58Low 3
Watch

Add Windows Server 2008 R2 Service Pack 1 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-34448
In wildKEV
6.8
40%
Jul 16
Scripting Engine Memory Corruption Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.25661
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27415
CVE-2022-26925
In wildKEV
5.9
10%
May 10
Windows LSA Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.25954
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27618
CVE-2023-36563
In wildKEV
5.5
20%
Oct 10
Microsoft WordPad Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26769
CVE-2021-41379
RansomwareIn wildKEV
5.5
19%
Nov 10
Windows Installer Elevation of Privilege Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.25769
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: All versions, or not specified
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27618
CVE-2024-38217
In wildKEV
5.4
10%
Sep 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27320
CVE-2023-36584
In wildKEV
5.4
3%
Oct 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26769
Showing 10