Microsoft Windows Server 2008 vulnerabilities
3,037 known vulnerabilities affecting microsoft/windows_server_2008.
Total CVEs
3,037
CISA KEV
133
actively exploited
Public exploits
364
Exploited in wild
190
Severity breakdown
CRITICAL180HIGH1977MEDIUM841LOW39
Vulnerabilities
Page 88 of 152
CVE-2022-21834P3HIGHCVSS 7.8vr22022-01-11
CVE-2022-21834 [HIGH] CVE-2022-21834: Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-22050P3HIGHCVSS 7.8vr22022-07-12
CVE-2022-22050 [HIGH] CVE-2022-22050: Windows Fax Service Elevation of Privilege Vulnerability
Windows Fax Service Elevation of Privilege Vulnerability
nvd
CVE-2023-35379P3HIGHCVSS 7.8vr22023-08-08
CVE-2023-35379 [HIGH] CWE-59 CVE-2023-35379: Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8vr22023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd
CVE-2022-21981P3HIGHCVSS 7.8vr22022-02-09
CVE-2022-21981 [HIGH] CVE-2022-21981: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-35820P3HIGHCVSS 7.8vr22022-08-09
CVE-2022-35820 [HIGH] CVE-2022-35820: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-34456P3HIGHCVSS 7.8vr2-sp12021-07-16
CVE-2021-34456 [HIGH] CWE-269 CVE-2021-34456: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2025-32707P3HIGHCVSS 7.8vr22025-05-13
CVE-2025-32707 [HIGH] CWE-125 CVE-2025-32707: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2021-27091P3HIGHCVSS 7.8vr22021-04-13
CVE-2021-27091 [HIGH] CVE-2021-27091: RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
nvd
CVE-2021-42285P3HIGHCVSS 7.8vr2-sp12021-11-10
CVE-2021-42285 [HIGH] CWE-269 CVE-2021-42285: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-31953P3HIGHCVSS 7.8vr22021-06-08
CVE-2021-31953 [HIGH] CVE-2021-31953: Windows Filter Manager Elevation of Privilege Vulnerability
Windows Filter Manager Elevation of Privilege Vulnerability
nvd
CVE-2021-40467P3HIGHCVSS 7.8vr22021-10-13
CVE-2021-40467 [HIGH] CWE-269 CVE-2021-40467: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36790P3HIGHCVSS 7.8vr22023-10-10
CVE-2023-36790 [HIGH] CWE-284 CVE-2023-36790: Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability
Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35342P3HIGHCVSS 7.8vr22023-07-11
CVE-2023-35342 [HIGH] CWE-59 CVE-2023-35342: Windows Image Acquisition Elevation of Privilege Vulnerability
Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2023-35312P3HIGHCVSS 7.8vr22023-07-11
CVE-2023-35312 [HIGH] CWE-190 CVE-2023-35312: Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
nvd
CVE-2021-41377P3HIGHCVSS 7.8vr2-sp12021-11-10
CVE-2021-41377 [HIGH] CWE-269 CVE-2021-41377: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21754P3HIGHCVSS 7.8vr22023-01-10
CVE-2023-21754 [HIGH] CWE-190 CVE-2023-21754: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-54894P3HIGHCVSS 7.8vr22025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2023-24946P3HIGHCVSS 7.8vr22023-05-09
CVE-2023-24946 [HIGH] CWE-591 CVE-2023-24946: Windows Backup Service Elevation of Privilege Vulnerability
Windows Backup Service Elevation of Privilege Vulnerability
nvd
CVE-2026-20816P3HIGHCVSS 7.0vr2-sp12026-01-13
CVE-2026-20816 [HIGH] CWE-367 CVE-2026-20816: Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd