Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 23 of 85
CVE-2020-1339P3HIGHCVSS 8.8≥ 6.0.0, < publication2020-08-17
CVE-2020-1339 [HIGH] CVE-2020-1339: A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objec
A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-24492P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.214462022-04-15
CVE-2022-24492 [HIGH] CVE-2022-24492: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2020-1113P3HIGHCVSS 7.5≥ 6.0.6003.0, < publication2020-05-21
CVE-2020-1113 [HIGH] CWE-295 CVE-2020-1113: A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with
nvd
CVE-2022-34734P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-34734 [HIGH] CVE-2022-34734: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34727P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-34727 [HIGH] CVE-2022-34727: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34732P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-34732 [HIGH] CVE-2022-34732: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34730P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-34730 [HIGH] CVE-2022-34730: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34726P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-34726 [HIGH] CVE-2022-34726: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2021-34497P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.211672021-07-14
CVE-2021-34497 [HIGH] CVE-2021-34497: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2021-34447P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.211672021-07-16
CVE-2021-34447 [HIGH] CVE-2021-34447: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-37982P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37982 [HIGH] CVE-2022-37982: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-38031P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38031 [HIGH] CVE-2022-38031: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-38054P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38054 [HIGH] CWE-122 CVE-2024-38054: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38180P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2024-21369P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21369 [HIGH] CWE-122 CVE-2024-21369: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21350P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-38131P3HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-38131 [HIGH] CWE-591 CVE-2024-38131: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
nvd
CVE-2026-20843P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.237172026-01-13
CVE-2026-20843 [HIGH] CWE-284 CVE-2026-20843: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-26919P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.214462022-04-15
CVE-2022-26919 [HIGH] CVE-2022-26919: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd