Microsoft Windows Server 2008 Service Pack 2 vulnerabilities
1,694 known vulnerabilities affecting microsoft/windows_server_2008_service_pack_2.
Total CVEs
1,694
CISA KEV
67
actively exploited
Public exploits
64
Exploited in wild
89
Severity breakdown
CRITICAL69HIGH1231MEDIUM391LOW3
Vulnerabilities
Page 9 of 85
CVE-2023-32057P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-32015P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221132023-06-14
CVE-2023-32015 [CRITICAL] CWE-20 CVE-2023-32015: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-29363P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221132023-06-14
CVE-2023-29363 [CRITICAL] CWE-122 CVE-2023-29363: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-32014P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221132023-06-14
CVE-2023-32014 [CRITICAL] CWE-191 CVE-2023-32014: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-35365P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-36911P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.222162023-08-08
CVE-2023-36911 [CRITICAL] CWE-190 CVE-2023-36911: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36005P3HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.224132023-12-12
CVE-2023-36005 [HIGH] CWE-591 CVE-2023-36005: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2025-27740P2HIGHCVSS 8.8≥ 6.0.6003.0, < 6.0.6003.232202025-04-08
CVE-2025-27740 [HIGH] CWE-1390 CVE-2025-27740: Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker t
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2025-26670P2HIGHCVSS 8.1≥ 6.0.6003.0, < 6.0.6003.232202025-04-08
CVE-2025-26670 [HIGH] CWE-416 CVE-2025-26670: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-44666P3HIGHCVSS 7.8≥ 6.0.6003.0, < 6.0.6003.218152022-12-13
CVE-2022-44666 [HIGH] CVE-2022-44666: Windows Contacts Remote Code Execution Vulnerability
Windows Contacts Remote Code Execution Vulnerability
nvd
CVE-2019-1213P2CRITICALCVSS 9.8≥ 6.0.0, < publication2019-08-14
CVE-2019-1213 [CRITICAL] CWE-787 CVE-2019-1213: A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends s
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server.
To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.
The secu
nvd
CVE-2023-36606P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.223172023-10-10
CVE-2023-36606 [HIGH] CWE-400 CVE-2023-36606: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2021-24077P2CRITICALCVSS 9.8≥ 6.0.0, < publication2021-02-25
CVE-2021-24077 [CRITICAL] CVE-2021-24077: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-30133P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.216162022-08-09
CVE-2022-30133 [CRITICAL] CVE-2022-30133: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
nvd
CVE-2019-0722P2HIGHCVSS 8.8≥ 6.0.0, < publication≥ 6.0.6003.0, < publication2019-06-12
CVE-2019-0722 [HIGH] CWE-20 CVE-2019-0722: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary
nvd
CVE-2023-28250P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.220152023-04-11
CVE-2023-28250 [CRITICAL] CWE-191 CVE-2023-28250: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-21803P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.219152023-02-14
CVE-2023-21803 [CRITICAL] CWE-190 CVE-2023-21803: Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
nvd
CVE-2023-35366P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35366 [CRITICAL] CWE-20 CVE-2023-35366: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-35367P2CRITICALCVSS 9.8≥ 6.0.6003.0, < 6.0.6003.221752023-07-11
CVE-2023-35367 [CRITICAL] CWE-20 CVE-2023-35367: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43452P3HIGHCVSS 7.5≥ 6.0.6003.0, < 6.0.6003.229662024-11-12
CVE-2024-43452 [HIGH] CWE-367 CVE-2024-43452: Windows Registry Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability
nvd