cbcvebase.

Microsoft Windows Server 2008 Service Pack 2 vulnerabilities

1,672 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.

Total CVEs
1,672
CISA KEV
66
actively exploited
Public exploits
61
Exploited in wild
86
Severity breakdown
CRITICAL68HIGH1214MEDIUM387LOW3

Vulnerabilities

Page 75 of 84
CVE-2019-0941P4MEDIUMCVSS 4.4≥ 6.0.6003.0, < publication≥ 6.0.0, < publication2019-06-12
CVE-2019-0941 [MEDIUM] CWE-19 CVE-2019-0941: A denial of service exists in Microsoft IIS Server when the optional request filtering feature impro A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering. To exploit this vulnerability, an attacker could send a specially crafted req
nvd
CVE-2025-21328P4MEDIUMCVSS 4.3≥ 6.0.6003.0, < 6.0.6003.230702025-01-14
CVE-2025-21328 [MEDIUM] CWE-41 CVE-2025-21328: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-21329P4MEDIUMCVSS 4.3≥ 6.0.6003.0, < 6.0.6003.230702025-01-14
CVE-2025-21329 [MEDIUM] CWE-41 CVE-2025-21329: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-21352P4MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.231172025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2024-38048P4MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38048 [MEDIUM] CWE-125 CVE-2024-38048: Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
nvd
CVE-2021-31184P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.6003.211172021-05-11
CVE-2021-31184 [MEDIUM] CVE-2021-31184: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
nvd
CVE-2021-1676P4MEDIUMCVSS 5.5≥ 6.0.0, < publication2021-01-12
CVE-2021-1676 [MEDIUM] CVE-2021-1676: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2022-23281P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.214162022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5≥ 6.0.0, < publication2020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.222642023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-21525P4MEDIUMCVSS 5.3≥ 6.0.6003.0, < 6.0.6003.218722023-01-10
CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6≥ 6.0.6003.0, < 6.0.6003.230702025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2022-21998P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.213742022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2024-30016P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-21985P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.213742022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-34457P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.6003.211672021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.6003.212182021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-38635P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.6003.212182021-09-15
CVE-2021-38635 [MEDIUM] CVE-2021-38635: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2023-36428P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.223672023-11-14
CVE-2023-36428 [MEDIUM] CWE-125 CVE-2023-36428: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
nvd
← Previous75 / 84Next →