Windows Server 2008 R2 vulnerabilities

7 known vulnerabilities in Windows Server 2008 R2 from Microsoft. 7 are rated high or critical, and 7 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Win32k Improper Resource Shutdown or Release Exploited

  CVE-2018-8639Dec 12, 2018MicrosoftEPSS 22.3%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2018-8611Dec 12, 2018MicrosoftEPSS 4.2%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, W

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2018-8589Nov 14, 2018MicrosoftEPSS 3.02%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2018-8453Oct 10, 2018MicrosoftEPSS 70%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2018-8440Sep 13, 2018MicrosoftEPSS 18.5%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serve

• 7.5 High severity

  Microsoft Windows VBScript Engine Out-of-Bounds Write Exploited

  CVE-2018-8174May 9, 2018MicrosoftEPSS 88.2%

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,

• 7.0 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2018-8120May 9, 2018MicrosoftEPSS 73.3%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID