Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 17 of 85
CVE-2021-28353P3HIGHCVSS 8.8≥ 6.0.0, < publication2021-04-13
CVE-2021-28353 [HIGH] CVE-2021-28353: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2025-59295P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.235712025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26205P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.226182024-04-09
CVE-2024-26205 [HIGH] CWE-122 CVE-2024-26205: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26200P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.226182024-04-09
CVE-2024-26200 [HIGH] CWE-122 CVE-2024-26200: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26179P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.226182024-04-09
CVE-2024-26179 [HIGH] CWE-122 CVE-2024-26179: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30009P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30009 [HIGH] CWE-197 CVE-2024-30009: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38128P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38128 [HIGH] CWE-190 CVE-2024-38128: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38121P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38121 [HIGH] CWE-122 CVE-2024-38121: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38115P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38115 [HIGH] CWE-122 CVE-2024-38115: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-38130P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38130 [HIGH] CWE-122 CVE-2024-38130: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38120P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38120 [HIGH] CWE-122 CVE-2024-38120: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38154P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38154 [HIGH] CWE-122 CVE-2024-38154: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38114P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38114 [HIGH] CWE-122 CVE-2024-38114: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2025-27477P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.232202025-04-08
CVE-2025-27477 [HIGH] CWE-122 CVE-2025-27477: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49125P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.230162024-12-12
CVE-2024-49125 [HIGH] CWE-122 CVE-2024-49125: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2019-1125P4MEDIUMCVSS 5.6PoC≥ 6.0.0, < publication2019-09-03
CVE-2019-1125 [MEDIUM] CVE-2019-1125: An information disclosure vulnerability exists when certain central processing units (CPU) speculati
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The v
nvd
CVE-2024-43589P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.229182024-10-08
CVE-2024-43589 [HIGH] CWE-122 CVE-2024-43589: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43453P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.229182024-10-08
CVE-2024-43453 [HIGH] CWE-122 CVE-2024-43453: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-35303P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35303 [HIGH] CWE-20 CVE-2023-35303: USB Audio Class System Driver Remote Code Execution Vulnerability
USB Audio Class System Driver Remote Code Execution Vulnerability
nvd
CVE-2024-38212P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.229182024-10-08
CVE-2024-38212 [HIGH] CWE-122 CVE-2024-38212: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd