Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 32 of 85
CVE-2023-36401P3HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.223672023-11-14
CVE-2023-36401 [HIGH] CWE-190 CVE-2023-36401: Microsoft Remote Registry Service Remote Code Execution Vulnerability
Microsoft Remote Registry Service Remote Code Execution Vulnerability
nvd
CVE-2025-59242P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.235712025-10-14
CVE-2025-59242 [HIGH] CWE-122 CVE-2025-59242: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38019P3HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38019 [HIGH] CWE-190 CVE-2024-38019: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2022-22034P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.215692022-07-12
CVE-2022-22034 [HIGH] CWE-416 CVE-2022-22034: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-35309P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2025-60704P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.236242025-11-11
CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges
Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2023-21557P3CRITICALCVSS 9.1≥ 6.0.6003.0, < 6.0.6003.218722023-01-10
CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
nvd
CVE-2024-38085P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-20653P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.224642024-01-09
CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability
Microsoft Common Log File System Elevation of Privilege Vulnerability
nvd
CVE-2020-0909P3HIGHCVSS 7.5≥ 6.0.6003.0, < publication2020-05-21
CVE-2020-0909 [HIGH] CVE-2020-0909: A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle s
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.
To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.
The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle
nvd
CVE-2024-38258P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.228702024-09-10
CVE-2024-38258 [HIGH] CWE-23 CVE-2024-38258: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
nvd
CVE-2023-38144P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.222642023-09-12
CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-38143P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.222642023-09-12
CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-37966P3HIGHCVSS 8.1v-2022-11-09
CVE-2022-37966 [HIGH] CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
nvd
CVE-2022-33647P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-33647 [HIGH] CVE-2022-33647: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2025-27737P3HIGHCVSS 8.6≥ 6.0.6003.0, < 6.0.6003.232202025-04-08
CVE-2025-27737 [HIGH] CWE-20 CVE-2025-27737: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2023-29351P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.221132023-06-14
CVE-2023-29351 [HIGH] CWE-59 CVE-2023-29351: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2021-34442P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.211672021-07-16
CVE-2021-34442 [HIGH] CVE-2021-34442: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2019-1057P3HIGHCVSS 7.5≥ 6.0.0, < publication2019-08-14
CVE-2019-1057 [HIGH] CWE-611 CVE-2019-1057: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system.
To exploit the vulnerability, an attacker could host a specially crafted website designed to invoke MSXML thr
nvd
CVE-2024-29995P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.228252024-08-13
CVE-2024-29995 [HIGH] CWE-208 CVE-2024-29995: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd