Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 41 of 85
CVE-2022-37956P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.216662022-09-13
CVE-2022-37956 [HIGH] CVE-2022-37956: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-34707P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.216162022-08-09
CVE-2022-34707 [HIGH] CWE-416 CVE-2022-34707: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-29050P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.226182024-04-09
CVE-2024-29050 [HIGH] CWE-197 CVE-2024-29050: Windows Cryptographic Services Remote Code Execution Vulnerability
Windows Cryptographic Services Remote Code Execution Vulnerability
nvd
CVE-2023-41766P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.223172023-10-10
CVE-2023-41766 [HIGH] CWE-426 CVE-2023-41766: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2024-38051P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2024-30095P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227202024-06-11
CVE-2024-30095 [HIGH] CWE-122 CVE-2024-30095: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2019-1168P3HIGHCVSS 7.8≥ 6.0.0, < publication2019-08-14
CVE-2019-1168 [HIGH] CVE-2019-1168: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploite
An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take co
nvd
CVE-2024-38249P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.228702024-09-10
CVE-2024-38249 [HIGH] CWE-416 CVE-2024-38249: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-38139P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.222642023-09-12
CVE-2023-38139 [HIGH] CWE-416 CVE-2023-38139: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30094P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227202024-06-11
CVE-2024-30094 [HIGH] CWE-122 CVE-2024-30094: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26173P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26173 [HIGH] CWE-20 CVE-2024-26173: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-26178P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26178 [HIGH] CWE-122 CVE-2024-26178: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38261P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.229182024-10-08
CVE-2024-38261 [HIGH] CWE-20 CVE-2024-38261: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26176P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225672024-03-12
CVE-2024-26176 [HIGH] CWE-126 CVE-2024-26176: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-21373P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.231172025-02-11
CVE-2025-21373 [HIGH] CWE-59 CVE-2025-21373: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-43626P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.229662024-11-12
CVE-2024-43626 [HIGH] CWE-122 CVE-2024-43626: Windows Telephony Service Elevation of Privilege Vulnerability
Windows Telephony Service Elevation of Privilege Vulnerability
nvd
CVE-2024-43556P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.229182024-10-08
CVE-2024-43556 [HIGH] CWE-416 CVE-2024-43556: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-30049P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30049 [HIGH] CWE-416 CVE-2024-30049: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2025-49689P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.234182025-07-08
CVE-2025-49689 [HIGH] CWE-125 CVE-2025-49689: Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevat
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2024-38079P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38079 [HIGH] CWE-122 CVE-2024-38079: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd