Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 7 of 85
CVE-2025-60724P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.236242025-11-11
CVE-2025-60724 [CRITICAL] CWE-122 CVE-2025-60724: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49113P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.230162024-12-12
CVE-2024-49113 [HIGH] CWE-125 CVE-2024-49113: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
nvd
CVE-2021-24078P2CRITICALCVSS 9.8≥ 6.0.0, < publication2021-02-25
CVE-2021-24078 [CRITICAL] CVE-2021-24078: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2025-29962P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.232792025-05-13
CVE-2025-29962 [HIGH] CWE-122 CVE-2025-29962: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49122P2HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.230162024-12-12
CVE-2024-49122 [HIGH] CWE-416 CVE-2024-49122: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2020-17051P2CRITICALCVSS 9.8≥ 6.0.0, < publication2020-11-11
CVE-2020-17051 [CRITICAL] CVE-2020-17051: Windows Network File System Remote Code Execution Vulnerability
Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-28231P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.220152023-04-11
CVE-2023-28231 [HIGH] CWE-122 CVE-2023-28231: DHCP Server Service Remote Code Execution Vulnerability
DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2023-28302P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.220152023-04-11
CVE-2023-28302 [HIGH] CWE-20 CVE-2023-28302: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-53766P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.234712025-08-12
CVE-2025-53766 [CRITICAL] CWE-122 CVE-2025-53766: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-26895P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.210702021-03-11
CVE-2021-26895 [CRITICAL] CVE-2021-26895: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-26894P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.210702021-03-11
CVE-2021-26894 [CRITICAL] CVE-2021-26894: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-36936P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.211922021-08-12
CVE-2021-36936 [CRITICAL] CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
nvd
CVE-2025-53143P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.234712025-08-12
CVE-2025-53143 [HIGH] CWE-843 CVE-2025-53143: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53145P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.234712025-08-12
CVE-2025-53145 [HIGH] CWE-843 CVE-2025-53145: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53144P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.234712025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2022-38044P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.217212022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
nvd
CVE-2021-26893P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.210702021-03-11
CVE-2021-26893 [CRITICAL] CVE-2021-26893: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-21769P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.220152023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.220702023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2022-21990P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.214162022-03-09
CVE-2022-21990 [HIGH] CVE-2022-21990: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd