VYPR

Windows Server 2008

by Microsoft

CVEs (3,572)

  • CVE-2013-3918HigKEVNov 12, 2013
    Microsoft
    Windows
    risk 0.78cvss 8.8epss 0.74

    The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold…

  • CVE-2011-3402HigKEVNov 4, 2011
    Microsoft
    Windows
    risk 0.78cvss 8.8epss 0.78

    Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to…

  • CVE-2025-33073HigKEVJun 10, 2025
    Microsoft
    Windows SMB
    risk 0.77cvss 8.8epss 0.80

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

  • CVE-2018-8453HigKEVOct 10, 2018
    Microsoft
    Windows Server 2008
    risk 0.77cvss 7.8epss 0.70

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2018-8174HigKEVMay 9, 2018
    Microsoft
    Windows Server 2008
    risk 0.77cvss 7.5epss 0.89

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2023-36025HigKEVNov 14, 2023
    Microsoft
    Windows SmartScreen
    risk 0.76cvss 8.8epss 0.88

    Windows SmartScreen Security Feature Bypass Vulnerability

  • CVE-2023-28252HigKEVApr 11, 2023
    Microsoft
    Windows Common Log File System Driver
    risk 0.76cvss 7.8epss 0.49

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  • CVE-2017-0101HigKEVMar 17, 2017
    Microsoft
    Windows
    risk 0.76cvss 7.8epss 0.57

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain…

  • CVE-2015-1701HigKEVApr 21, 2015
    Microsoft
    Windows
    risk 0.76cvss 7.8epss 0.56

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

  • CVE-2023-36884HigKEVJul 11, 2023
    Microsoft
    Windows Search
    risk 0.75cvss 7.5epss 0.99

    Windows Search Remote Code Execution Vulnerability

  • CVE-2022-21999HigKEVFeb 9, 2022
    Microsoft
    Windows Print Spooler
    risk 0.75cvss 7.8epss 0.42

    Windows Print Spooler Elevation of Privilege Vulnerability

  • CVE-2021-36942HigKEVAug 12, 2021
    Microsoft
    Windows
    risk 0.75cvss 7.5epss 0.66

    Windows LSA Spoofing Vulnerability

  • CVE-2020-0787HigKEVMar 12, 2020
    Microsoft
    Windows Background Intelligent Transfer Service (BITS)
    risk 0.75cvss 7.8epss 0.43

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

  • CVE-2017-0213HigKEVMay 12, 2017
    Microsoft
    Windows Server 2008
    risk 0.75cvss 7.3epss 0.84

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an…

  • CVE-2016-0099HigKEVMar 9, 2016
    Microsoft
    Windows
    risk 0.75cvss 7.8epss 0.37

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain…

  • CVE-2023-21554CriApr 11, 2023
    Microsoft
    Message Queuing
    risk 0.74cvss 9.8epss 0.95

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  • CVE-2020-1020HigKEVApr 15, 2020
    Microsoft
    Windows
    risk 0.74cvss 8.8epss 0.65

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…

  • CVE-2019-1405HigKEVNov 12, 2019
    Microsoft
    Windows Universal Plug and Play (UPnP) service
    risk 0.74cvss 7.8epss 0.30

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

  • CVE-2016-7256HigKEVNov 10, 2016
    Microsoft
    Windows
    risk 0.74cvss 8.8epss 0.65

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute…

  • CVE-2024-43461HigKEVSep 10, 2024
    Microsoft
    MSHTML Platform
    risk 0.73cvss 8.8epss 0.52

    Windows MSHTML Platform Spoofing Vulnerability

Page 2 of 179