WS
Product
Windows Server 2008
On CISA KEVExploited in the wildRansomware-linked
3,550
CVEs
148
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 96High 387Medium 17Low 0
Watch
Add Windows Server 2008 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34722 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-34721 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-34718 | 9.8 | Sep 13 | Windows TCP/IP Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-26937 | 9.8 | May 10 | Windows Network File System Remote Code Execution Vulnerability Affected: r2; r2; sp2; sp2 |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: r2; r2; sp2; sp2 |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: r2; r2; r2 |
| CVE-2021-26897 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2; sp2; sp2 |
| CVE-2021-26895 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2; sp2; sp2 |
| CVE-2021-26894 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2; sp2; sp2 |
| CVE-2021-26893 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26877 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24078 | 9.8 | Feb 25 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: r2 |
| CVE-2020-17051 | 9.8 | Nov 11 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2019-1213 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server Affected: All versions, or not specified |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: r2; r2 |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: All versions, or not specified |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: All versions, or not specified |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: r2; r2 |
| CVE-2019-0725 | 9.8 | May 16 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution… Affected: r2; r2 |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: r2 |
| CVE-2018-8476 | 9.8 | Nov 14 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote… Affected: r2 |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: r2 |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: r2 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: r2 |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: r2 |
| CVE-2011-2013 | 9.8 | Nov 8 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to… Affected: r2; r2 |
| CVE-2011-0657 | 9.8 | Apr 13 | DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7… Affected: r2; r2 |
| CVE-2009-2512 | 9.8 | Nov 11 | The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows… Affected: All versions, or not specified |
| CVE-2009-2494 | 9.8 | Aug 12 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4835 | 9.8 | Jan 14 | SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-3465 | 9.8 | Dec 10 | Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent… Affected: All versions, or not specified |
| CVE-2021-31962 | 9.4 | Jun 8 | Kerberos AppContainer Security Feature Bypass Vulnerability Affected: r2; sp2 |
| CVE-2019-0719 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: r2 |
| CVE-2024-38124 | 9.0 | Oct 8 | Windows Netlogon Elevation of Privilege Vulnerability Affected: r2 |
| CVE-2020-1043 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1042 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1041 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1036 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1032 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
The 500 most important CVEs for this product (exploited first, then by severity)