Microsoft Windows Server 2008 Service Pack 2 vulnerabilities

1,672 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.

Total CVEs
1,672
CISA KEV
66
actively exploited
Public exploits
37
Exploited in wild
58
Severity breakdown
CRITICAL68HIGH1214MEDIUM387LOW3

Vulnerabilities

Page 52 of 84
CVE-2022-33635HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-33635 [HIGH] Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability
cvelistv5
CVE-2022-37991HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37991 [HIGH] CVE-2022-37991: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-37982HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37982 [HIGH] CVE-2022-37982: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-37993HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37993 [HIGH] CVE-2022-37993: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-41081HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37986HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37986 [HIGH] CVE-2022-37986: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-38037HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38037 [HIGH] CVE-2022-38037: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-38031HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38031 [HIGH] CVE-2022-38031: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-41033HIGHCVSS 7.8KEV≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-41033 [HIGH] CWE-843 CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability Windows COM+ Event System Service Elevation of Privilege Vulnerability
nvd
CVE-2022-37987HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37987 [HIGH] CVE-2022-37987: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-38042HIGHCVSS 7.1≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38042 [HIGH] CVE-2022-38042: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2022-37994HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37994 [HIGH] CVE-2022-37994: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-38034HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability Windows Workstation Service Elevation of Privilege Vulnerability
nvd
CVE-2022-37999HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37999 [HIGH] CVE-2022-37999: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-37990HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37990 [HIGH] CVE-2022-37990: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-34689HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.216162022-10-11
CVE-2022-34689 [HIGH] Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability
cvelistv5
CVE-2022-33645HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-33645 [HIGH] CVE-2022-33645: Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Driver Denial of Service Vulnerability
nvd
CVE-2022-38029HIGHCVSS 7.0≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38029 [HIGH] Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-37981MEDIUMCVSS 4.3≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-37981 [MEDIUM] CVE-2022-37981: Windows Event Logging Service Denial of Service Vulnerability Windows Event Logging Service Denial of Service Vulnerability
nvd
CVE-2022-38032MEDIUMCVSS 6.6≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38032 [MEDIUM] CVE-2022-38032: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
nvd