Windows Server 2008 vulnerabilities

175 known vulnerabilities in Windows Server 2008 from Microsoft. 159 are rated high or critical, and 148 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2021-42287Nov 10, 2021MicrosoftEPSS 77.2%

  Active Directory Domain Services Elevation of Privilege Vulnerability

• 7.5 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2021-42278Nov 10, 2021MicrosoftEPSS 73.3%

  Active Directory Domain Services Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Installer Privilege Escalation Exploited

  CVE-2021-41379Nov 10, 2021MicrosoftEPSS 19.5%

  Windows Installer Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Win32k Privilege Escalation Exploited

  CVE-2021-40449Oct 13, 2021MicrosoftEPSS 81.9%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft MSHTML Remote Code Execution Exploited

  CVE-2021-40444Sep 15, 2021MicrosoftEPSS 97.8%

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An at

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2021-36955Sep 15, 2021MicrosoftEPSS 4.07%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.5 High severity

  Microsoft Windows Local Security Authority (LSA) Spoofing Exploited

  CVE-2021-36942Aug 12, 2021MicrosoftEPSS 66%

  Windows LSA Spoofing Vulnerability

• 7.8 High severity

  Microsoft Windows User Profile Service Privilege Escalation Exploited

  CVE-2021-34484Aug 12, 2021MicrosoftEPSS 21.8%

  Windows User Profile Service Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Scripting Engine Memory Corruption Exploited

  CVE-2021-34448Jul 16, 2021MicrosoftEPSS 40.1%

  Scripting Engine Memory Corruption Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2021-31979Jul 14, 2021MicrosoftEPSS 4.54%

  Windows Kernel Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-34527Jul 2, 2021MicrosoftEPSS 99.8%

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the

• 8.8 High severity

  Microsoft Windows MSHTML Platform Remote Code Execution Exploited

  CVE-2021-33742Jun 8, 2021MicrosoftEPSS 59.4%

  Windows MSHTML Platform Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows NTFS Privilege Escalation Exploited

  CVE-2021-31956Jun 8, 2021MicrosoftEPSS 22.3%

  Windows NTFS Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31201Jun 8, 2021MicrosoftEPSS 2.62%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31199Jun 8, 2021MicrosoftEPSS 2.98%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-1675Jun 8, 2021MicrosoftEPSS 85.3%

  Windows Print Spooler Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2020-17087Nov 11, 2020MicrosoftEPSS 5.43%

  Windows Kernel Local Elevation of Privilege Vulnerability

• 10.0 Critical severity

  Microsoft Netlogon Privilege Escalation Exploited

  CVE-2020-1472Aug 17, 2020MicrosoftEPSS 99.4%

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run

• 5.5 Medium severity

  Microsoft Windows Spoofing Exploited

  CVE-2020-1464Aug 17, 2020MicrosoftEPSS 38.9%

  A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secur

• 10.0 Critical severity

  Microsoft Windows DNS Server Remote Code Execution Exploited

  CVE-2020-1350Jul 14, 2020MicrosoftEPSS 96.7%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

• 9.0 Critical severity

  Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Exploited

  CVE-2020-1040Jul 14, 2020MicrosoftEPSS 7.56%

  A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is un

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2020-1054May 21, 2020MicrosoftEPSS 53.9%

  An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2020-1027Apr 15, 2020MicrosoftEPSS 4.72%

  An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

• 8.8 High severity

  Microsoft Windows Adobe Font Manager Library Remote Code Execution Exploited

  CVE-2020-1020Apr 15, 2020MicrosoftEPSS 65%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfu

• 7.8 High severity

  Microsoft Windows Adobe Font Manager Library Remote Code Execution Exploited

  CVE-2020-0938Apr 15, 2020MicrosoftEPSS 69%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfu

• 7.8 High severity

  Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Exploited

  CVE-2020-0787Mar 12, 2020MicrosoftEPSS 42.5%

  An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

• 7.8 High severity

  Microsoft Windows Installer Privilege Escalation Exploited

  CVE-2020-0683Feb 11, 2020MicrosoftEPSS 7.67%

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2019-1458Dec 10, 2019MicrosoftEPSS 74.4%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

• 7.8 High severity

  Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Exploited

  CVE-2019-1405Nov 12, 2019MicrosoftEPSS 30.2%

  An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

• 7.8 High severity

  Microsoft Windows Certificate Dialog Privilege Escalation Exploited

  CVE-2019-1388Nov 12, 2019MicrosoftEPSS 8.59%

  An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

• 7.8 High severity

  Microsoft Windows Error Reporting Manager Privilege Escalation Exploited

  CVE-2019-1315Oct 10, 2019MicrosoftEPSS 3.48%

  An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2019-1215Sep 11, 2019MicrosoftEPSS 19.3%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

• 7.8 High severity

  Microsoft Windows Privilege Common Log File System (CLFS) Escalation Exploited

  CVE-2019-1214Sep 11, 2019MicrosoftEPSS 1.42%

  An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2019-1132Jul 15, 2019MicrosoftEPSS 9.87%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

• 8.8 High severity

  Microsoft GDI Remote Code Execution Exploited

  CVE-2019-0903May 16, 2019MicrosoftEPSS 21.7%

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

• 7.8 High severity

  Microsoft Windows Error Reporting (WER) Privilege Escalation Exploited

  CVE-2019-0863May 16, 2019MicrosoftEPSS 5.21%

  An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

• 9.8 Critical severity

  Microsoft Remote Desktop Services Remote Code Execution Exploited

  CVE-2019-0708May 16, 2019MicrosoftEPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2019-0859Apr 9, 2019MicrosoftEPSS 4.19%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2019-0803Apr 9, 2019MicrosoftEPSS 45.2%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2019-0808Apr 9, 2019MicrosoftEPSS 53.3%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.