Microsoft Windows Server 2008 vulnerabilities
3,037 known vulnerabilities affecting microsoft/windows_server_2008.
Total CVEs
3,037
CISA KEV
133
actively exploited
Public exploits
363
Exploited in wild
187
Severity breakdown
CRITICAL180HIGH1977MEDIUM841LOW39
Vulnerabilities
Page 145 of 152
CVE-2020-1005P4MEDIUMCVSS 5.5vr22020-04-15
CVE-2020-1005 [MEDIUM] CVE-2020-1005: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component imprope
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-0987.
nvd
CVE-2020-0639P4MEDIUMCVSS 5.5vr22020-01-14
CVE-2020-0639 [MEDIUM] CVE-2020-0639: An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver w
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.
nvd
CVE-2020-0608P4MEDIUMCVSS 5.5vr22020-01-14
CVE-2020-0608 [MEDIUM] CVE-2020-0608: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
nvd
CVE-2019-1409P4MEDIUMCVSS 5.5vr22019-11-12
CVE-2019-1409 [MEDIUM] CWE-665 CVE-2019-1409: An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime
An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'.
nvd
CVE-2021-1676P4MEDIUMCVSS 5.5vr22021-01-12
CVE-2021-1676 [MEDIUM] CVE-2021-1676: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2020-1389P4MEDIUMCVSS 5.5vr22020-07-14
CVE-2020-1389 [MEDIUM] CVE-2020-1389: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426.
nvd
CVE-2020-1072P4MEDIUMCVSS 5.5vr22020-05-21
CVE-2020-1072 [MEDIUM] CVE-2020-1072: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
nvd
CVE-2022-23281P4MEDIUMCVSS 5.5vr22022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5vr22020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5vr22023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-21525P4MEDIUMCVSS 5.3vr22023-01-10
CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2020-0779P4MEDIUMCVSS 5.5vr22020-03-12
CVE-2020-0779 [MEDIUM] CWE-59 CVE-2020-0779: An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process sy
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6vr22025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2022-21998P4MEDIUMCVSS 5.5vr22022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2024-30016P4MEDIUMCVSS 5.5vr22024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5vr22024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-21985P4MEDIUMCVSS 5.5vr22022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-24493P4MEDIUMCVSS 5.5vr22022-04-15
CVE-2022-24493 [MEDIUM] CVE-2022-24493: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2021-34457P4MEDIUMCVSS 5.5vr22021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5vr22021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd