Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,672 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,672
CISA KEV
66
actively exploited
Public exploits
61
Exploited in wild
86
Severity breakdown
CRITICAL68HIGH1214MEDIUM387LOW3
Vulnerabilities
Page 31 of 84
CVE-2023-28244P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.220152023-04-11
CVE-2023-28244 [HIGH] CWE-327 CVE-2023-28244: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-37966P3HIGHCVSS 8.1vN/A2022-11-09
CVE-2022-37966 [HIGH] CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
nvd
CVE-2021-33754P3HIGHCVSS 8.0≥ 6.0.0, < 6.0.6003.211672021-07-14
CVE-2021-33754 [HIGH] CVE-2021-33754: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-41109P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217682022-11-09
CVE-2022-41109 [HIGH] CVE-2022-41109: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-44670P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.218152022-12-13
CVE-2022-44670 [HIGH] CWE-367 CVE-2022-44670: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-24504P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-24504 [HIGH] CWE-362 CVE-2022-24504: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-38047P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38047 [HIGH] CWE-362 CVE-2022-38047: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-33634P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-33634 [HIGH] CWE-362 CVE-2022-33634: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-34702P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.216162022-08-09
CVE-2022-34702 [HIGH] CWE-362 CVE-2022-34702: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-38051P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38051 [HIGH] CVE-2022-38051: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-30140P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.215072022-06-15
CVE-2022-30140 [HIGH] CVE-2022-30140: Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
nvd
CVE-2024-30022P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30022 [HIGH] CWE-197 CVE-2024-30022: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30024P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30024 [HIGH] CWE-197 CVE-2024-30024: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30023P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30023 [HIGH] CWE-197 CVE-2024-30023: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-32713P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.233512025-06-10
CVE-2025-32713 [HIGH] CWE-122 CVE-2025-32713: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-24474P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.214462022-04-15
CVE-2022-24474 [HIGH] CVE-2022-24474: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2024-38044P3HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38044 [HIGH] CWE-197 CVE-2024-38044: DHCP Server Service Remote Code Execution Vulnerability
DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2024-38028P3HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38028 [HIGH] CWE-125 CVE-2024-38028: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2024-38025P3HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38025 [HIGH] CWE-122 CVE-2024-38025: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2025-50173P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.234712025-08-12
CVE-2025-50173 [HIGH] CWE-1390 CVE-2025-50173: Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd