Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 49 of 85
CVE-2022-24459P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.214162022-03-09
CVE-2022-24459 [HIGH] CVE-2022-24459: Windows Fax and Scan Service Elevation of Privilege Vulnerability
Windows Fax and Scan Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21834P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.213492022-01-11
CVE-2022-21834 [HIGH] CVE-2022-21834: Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-22050P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.215692022-07-12
CVE-2022-22050 [HIGH] CVE-2022-22050: Windows Fax Service Elevation of Privilege Vulnerability
Windows Fax Service Elevation of Privilege Vulnerability
nvd
CVE-2024-21354P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.225112024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.223672023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd
CVE-2022-21981P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.213742022-02-09
CVE-2022-21981 [HIGH] CVE-2022-21981: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-32707P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.232792025-05-13
CVE-2025-32707 [HIGH] CWE-125 CVE-2025-32707: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2021-31953P3HIGHCVSS 7.8≥ 6.0.0, < 6.0.6003.211372021-06-08
CVE-2021-31953 [HIGH] CVE-2021-31953: Windows Filter Manager Elevation of Privilege Vulnerability
Windows Filter Manager Elevation of Privilege Vulnerability
nvd
CVE-2021-40467P3HIGHCVSS 7.8≥ 6.0.0, < 6.0.6003.212512021-10-13
CVE-2021-40467 [HIGH] CWE-269 CVE-2021-40467: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-38626P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.212182021-09-15
CVE-2021-38626 [HIGH] CWE-269 CVE-2021-38626: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-38625P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.212182021-09-15
CVE-2021-38625 [HIGH] CWE-269 CVE-2021-38625: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-36790P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.223172023-10-10
CVE-2023-36790 [HIGH] CWE-284 CVE-2023-36790: Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability
Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-41377P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.212822021-11-10
CVE-2021-41377 [HIGH] CWE-269 CVE-2021-41377: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21754P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.218722023-01-10
CVE-2023-21754 [HIGH] CWE-190 CVE-2023-21754: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-54894P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.235292025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2024-30031P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30031 [HIGH] CWE-416 CVE-2024-30031: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
nvd
CVE-2024-26232P3HIGHCVSS 7.3≥ 6.0.6003.0, < 6.0.6003.226182024-04-09
CVE-2024-26232 [HIGH] CWE-843 CVE-2024-26232: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2025-25004P3HIGHCVSS 7.3≥ 6.0.6003.0, < 6.0.6003.235712025-10-14
CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49727P3HIGHCVSS 7.0≥ 6.0.6003.0, < 6.0.6003.234182025-07-08
CVE-2025-49727 [HIGH] CWE-122 CVE-2025-49727: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54099P3HIGHCVSS 7.0≥ 6.0.6003.0, < 6.0.6003.235292025-09-09
CVE-2025-54099 [HIGH] CWE-121 CVE-2025-54099: Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized at
Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd