Microsoft Windows Server 2008 Service Pack 2 vulnerabilities

1,672 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.

Total CVEs
1,672
CISA KEV
66
actively exploited
Public exploits
37
Exploited in wild
58
Severity breakdown
CRITICAL68HIGH1214MEDIUM387LOW3

Vulnerabilities

Page 39 of 84
CVE-2023-36882HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-36882 [HIGH] CWE-416 CVE-2023-36882: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-35377MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-36889MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-36889 [MEDIUM] CWE-284 CVE-2023-36889: Windows Group Policy Security Feature Bypass Vulnerability Windows Group Policy Security Feature Bypass Vulnerability
nvd
CVE-2023-36909MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-36909 [MEDIUM] CWE-191 CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-38254MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-38254 [MEDIUM] CWE-20 CVE-2023-38254: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-35376MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-35366CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35366 [CRITICAL] CWE-20 CVE-2023-35366: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-35367CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35367 [CRITICAL] CWE-20 CVE-2023-35367: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-33154CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-33154 [CRITICAL] CWE-367 CVE-2023-33154: Windows Partition Management Driver Elevation of Privilege Vulnerability Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35365CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-32057CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-33173HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-33173 [HIGH] CWE-126 CVE-2023-33173: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-32042HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-32042 [HIGH] CWE-908 CVE-2023-32042: OLE Automation Information Disclosure Vulnerability OLE Automation Information Disclosure Vulnerability
nvd
CVE-2023-35328HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35328 [HIGH] CWE-197 CVE-2023-35328: Windows Transaction Manager Elevation of Privilege Vulnerability Windows Transaction Manager Elevation of Privilege Vulnerability
nvd
CVE-2023-35350HIGHCVSS 7.2≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35350 [HIGH] CWE-122 CVE-2023-35350: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
nvd
CVE-2023-35299HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35299 [HIGH] CWE-125 CVE-2023-35299: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-33172HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-33172 [HIGH] CWE-126 CVE-2023-33172: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33168HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-33168 [HIGH] CWE-126 CVE-2023-33168: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33167HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-33167 [HIGH] CWE-126 CVE-2023-33167: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-35300HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35300 [HIGH] CWE-416 CVE-2023-35300: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd