Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 76 of 85
CVE-2024-38048P4MEDIUMCVSS 6.5≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38048 [MEDIUM] CWE-125 CVE-2024-38048: Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
nvd
CVE-2021-31184P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.6003.211172021-05-11
CVE-2021-31184 [MEDIUM] CVE-2021-31184: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
nvd
CVE-2022-34708P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.216162022-08-09
CVE-2022-34708 [MEDIUM] CWE-200 CVE-2022-34708: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2021-1676P4MEDIUMCVSS 5.5≥ 6.0.0, < publication2021-01-12
CVE-2021-1676 [MEDIUM] CVE-2021-1676: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2022-23281P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.214162022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5≥ 6.0.0, < publication2020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.222642023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6≥ 6.0.6003.0, < 6.0.6003.230702025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.212182021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-38635P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.212182021-09-15
CVE-2021-38635 [MEDIUM] CVE-2021-38635: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-34457P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.211672021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-21998P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.213742022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2024-30016P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.226682024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.227692024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-21985P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.213742022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2023-36428P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.223672023-11-14
CVE-2023-36428 [MEDIUM] CWE-125 CVE-2023-36428: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
nvd
CVE-2022-35758P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.216162023-05-31
CVE-2022-35758 [MEDIUM] CVE-2022-35758: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2023-21697P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.219152023-02-14
CVE-2023-21697 [MEDIUM] CWE-126 CVE-2023-21697: Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
nvd
CVE-2023-23394P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.219662023-03-14
CVE-2023-23394 [MEDIUM] CWE-822 CVE-2023-23394: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
nvd
CVE-2023-23409P4MEDIUMCVSS 5.5≥ 6.0.6003.0, < 6.0.6003.219662023-03-14
CVE-2023-23409 [MEDIUM] CWE-20 CVE-2023-23409: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
nvd