WS
Product
Windows Server 2008 Service Pack 2
by Microsoft · last CVE Jan 13, 2026
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 140Medium 27Low 0
Watch

Add Windows Server 2008 Service Pack 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.22966
CVE-2022-26925
In wildKEV
5.9
10%
May 10
Windows LSA Spoofing Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.21481
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.23168
CVE-2023-36563
In wildKEV
5.5
20%
Oct 10
Microsoft WordPad Information Disclosure Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.22317
CVE-2021-41379
RansomwareIn wildKEV
5.5
19%
Nov 10
Windows Installer Elevation of Privilege Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.21282
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: All versions, or not specified
CVE-2024-38217
In wildKEV
5.4
10%
Sep 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.22870
CVE-2023-36584
In wildKEV
5.4
3%
Oct 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.0.6003.0 before 6.0.6003.22317
Page 2 of 2 · 58 total