Microsoft Windows Server 2008 Service Pack 2 vulnerabilities

1,672 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.

Total CVEs
1,672
CISA KEV
66
actively exploited
Public exploits
37
Exploited in wild
58
Severity breakdown
CRITICAL68HIGH1214MEDIUM387LOW3

Vulnerabilities

Page 31 of 84
CVE-2024-21436HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21436 [HIGH] CWE-284 CVE-2024-21436: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-21439HIGHCVSS 7.0≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21439 [HIGH] CWE-416 CVE-2024-21439: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2024-26162HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26162 [HIGH] CWE-681 CVE-2024-26162: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21437HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21437 [HIGH] CWE-416 CVE-2024-21437: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-26159HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26159 [HIGH] CWE-122 CVE-2024-26159: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21446HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21446 [HIGH] CWE-591 NTFS Elevation of Privilege Vulnerability NTFS Elevation of Privilege Vulnerability NTFS Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-21451HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21451 [HIGH] CWE-197 CVE-2024-21451: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26176HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26176 [HIGH] CWE-126 CVE-2024-26176: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-21444HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21444 [HIGH] CWE-190 CVE-2024-21444: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21450HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21450 [HIGH] CWE-190 CVE-2024-21450: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21441HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21441 [HIGH] CWE-190 CVE-2024-21441: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-26161HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26161 [HIGH] CWE-122 CVE-2024-26161: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21440HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21440 [HIGH] CWE-197 CVE-2024-21440: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21429MEDIUMCVSS 6.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-21429 [MEDIUM] CWE-197 CVE-2024-21429: Windows USB Hub Driver Remote Code Execution Vulnerability Windows USB Hub Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26177MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26177 [MEDIUM] CWE-200 CVE-2024-26177: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-26174MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26174 [MEDIUM] CWE-125 CVE-2024-26174: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-26181MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26181 [MEDIUM] CWE-20 Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability
cvelistv5
CVE-2024-21347HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21347 [HIGH] CWE-122 CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21370HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21370 [HIGH] CWE-122 CVE-2024-21370: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21350HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd