WS
Product
Windows Server 2008
by Microsoft · last CVE Jan 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,550
CVEs
148
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 96High 387Medium 17Low 0
Watch

Add Windows Server 2008 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-34448
In wildKEV
6.8
40%
Jul 16
Scripting Engine Memory Corruption Vulnerability
Affected: r2
CVE-2015-1769
In wildKEV
6.6
4%
Aug 15
Microsoft Windows Mount Manager Privilege Escalation Vulnerability
Affected: r2; r2
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: r2
CVE-2019-0703
In wildKEV
6.5
9%
Apr 8
Microsoft Windows SMB Information Disclosure Vulnerability
Affected: r2; r2
CVE-2017-0022
In wildKEV
6.5
18%
Mar 17
Microsoft XML Core Services Information Disclosure Vulnerability
Affected: r2
CVE-2016-3298
In wildKEV
6.5
33%
Oct 14
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
Affected: r2; r2
CVE-2022-26925
In wildKEV
5.9
10%
May 10
Windows LSA Spoofing Vulnerability
Affected: r2
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: r2
CVE-2023-36563
In wildKEV
5.5
20%
Oct 10
Microsoft WordPad Information Disclosure Vulnerability
Affected: r2
CVE-2021-41379
RansomwareIn wildKEV
5.5
19%
Nov 10
Windows Installer Elevation of Privilege Vulnerability
Affected: r2
CVE-2020-1472
RansomwareIn wildKEV
5.5
99%
Aug 17
Netlogon Elevation of Privilege Vulnerability
Affected: r2
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: r2
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: r2
CVE-2024-38217
In wildKEV
5.4
10%
Sep 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: r2
CVE-2023-36584
In wildKEV
5.4
3%
Oct 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: r2
CVE-2021-31199
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: r2
CVE-2021-31201
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: r2
Showing 17
The 500 most important CVEs for this product (exploited first, then by severity)