Windows Server 2008

CVEs (3,572)

• CVE-2024-38144HigAug 13, 2024
  Microsoft

  Kernel Streaming WOW Thunk Service Driver
  risk 0.60cvss 8.8epss 0.32

  Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

• CVE-2023-35628HigDec 12, 2023
  Microsoft

  MSHTML Platform
  risk 0.60cvss 8.1epss 0.93

  Windows MSHTML Platform Remote Code Execution Vulnerability

• CVE-2023-28231HigApr 11, 2023
  Microsoft

  DHCP Server
  risk 0.60cvss 8.8epss 0.37

  DHCP Server Service Remote Code Execution Vulnerability

• CVE-2022-41076HigDec 13, 2022
  Microsoft

  Powershell
  risk 0.60cvss 8.5epss 0.62

  PowerShell Remote Code Execution Vulnerability

• CVE-2022-37958HigSep 13, 2022
  Microsoft

  Windows Server 2003
  risk 0.60cvss 8.1epss 0.86

  SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

• CVE-2022-24500HigApr 15, 2022
  Microsoft

  Windows SMB
  risk 0.60cvss 8.8epss 0.38

  Windows SMB Remote Code Execution Vulnerability

• CVE-2020-1301HigJun 9, 2020
  Microsoft

  Server Message Block
  risk 0.60cvss 8.8epss 0.37

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

• CVE-2020-0729HigFeb 11, 2020
  Microsoft

  Windows
  risk 0.60cvss 8.8epss 0.31

  A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…

• CVE-2019-0719CriNov 12, 2019
  Microsoft

  Windows Hyper-V Network Switch
  risk 0.60cvss 9.1epss 0.11

  A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721.

• CVE-2018-1010HigApr 12, 2018
  Microsoft

  Windows Server 2008
  risk 0.60cvss 8.8epss 0.40

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…

• CVE-2016-7272HigDec 20, 2016
  Microsoft

  Windows
  risk 0.60cvss 8.8epss 0.39

  The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via…

• CVE-2016-3345HigSep 14, 2016
  Microsoft

  Windows
  risk 0.60cvss 8.8epss 0.32

  The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via crafted packets, aka…

• CVE-2016-0041HigFeb 10, 2016
  Microsoft

  Internet Explorer
  risk 0.60cvss 7.8epss 0.83

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a…

• CVE-2013-0810HigSep 11, 2013
  Microsoft

  Windows
  risk 0.60cvss 8.1epss 0.60

  Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."

• CVE-2009-2493HigJul 29, 2009
  Microsoft

  Windows 2000
  risk 0.60cvss 8.8epss 0.38

  The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2;…

• CVE-2009-0901HigJul 29, 2009
  Microsoft

  Visual Studio
  risk 0.60cvss 8.8epss 0.37

  The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does…

• CVE-2009-0231HigJul 15, 2009
  Microsoft

  Windows 2000
  risk 0.60cvss 8.8epss 0.37

  The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers…

• CVE-2008-1083HigApr 8, 2008
  Microsoft

  Windows 2000
  risk 0.60cvss 8.1epss 0.57

  Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers…

• CVE-2025-55234HigSep 9, 2025
  Microsoft

  SMB Server
  risk 0.59cvss 8.8epss 0.20

  SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for…

• CVE-2025-54918HigSep 9, 2025
  Microsoft

  Windows
  risk 0.59cvss 8.8epss 0.19

  Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.