Windows Server 2008 R2 Service Pack 1 (Server Core installation) vulnerabilities

Product

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

by Microsoft · last CVE Dec 15, 2021

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities31 In the news1 Timeline

Severity mix

Critical 0High 23Medium 8Low 0

Severity

All severities31 Critical0 High23 Medium8 Low0

Exploitation

On CISA KEV17 Exploited in the wild17

Watch

Add Windows Server 2008 R2 Service Pack 1 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-1472 RansomwareIn wildKEV	5.5	99%	Aug 17	Netlogon Elevation of Privilege Vulnerability Affected: 6.1.0 before publication
CVE-2021-31201 In wildKEV	5.2	3%	Jun 8	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Affected: 6.1.0 before 6.1.7601.25632
CVE-2021-31199 In wildKEV	5.2	3%	Jun 8	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Affected: 6.0.0 before 6.1.7601.25632
CVE-2018-8394	6.5	9%	Aug 15	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure… Affected: Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
CVE-2018-8398	6.5	9%	Aug 15	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure… Affected: Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
CVE-2018-8396	4.7	3%	Aug 15	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure… Affected: Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
CVE-2018-8341	4.7	3%	Aug 15	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This… Affected: Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
CVE-2018-8348	4.7	2%	Aug 15	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This… Affected: Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)