Windows Server 2008
by Microsoft
CVEs (2,628)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-41086 | Med | 0.42 | 6.4 | 0.00 | Nov 9, 2022 | Windows Group Policy Elevation of Privilege Vulnerability | ||
| CVE-2022-38033 | Med | 0.42 | 6.5 | 0.02 | Oct 11, 2022 | Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability | ||
| CVE-2022-37977 | Med | 0.42 | 6.5 | 0.02 | Oct 11, 2022 | Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | ||
| CVE-2022-35770 | Med | 0.42 | 6.5 | 0.01 | Oct 11, 2022 | Windows NTLM Spoofing Vulnerability | ||
| CVE-2022-38006 | Med | 0.42 | 6.5 | 0.02 | Sep 13, 2022 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2022-35837 | Med | 0.42 | 6.5 | 0.02 | Sep 13, 2022 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2022-30208 | Med | 0.42 | 6.5 | 0.02 | Jul 12, 2022 | Windows Security Account Manager (SAM) Denial of Service Vulnerability | ||
| CVE-2022-22042 | Med | 0.42 | 6.5 | 0.02 | Jul 12, 2022 | Windows Hyper-V Information Disclosure Vulnerability | ||
| CVE-2022-29121 | Med | 0.42 | 6.5 | 0.01 | May 10, 2022 | Windows WLAN AutoConfig Service Denial of Service Vulnerability | ||
| CVE-2022-29112 | Med | 0.42 | 6.5 | 0.03 | May 10, 2022 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2022-26936 | Med | 0.42 | 6.5 | 0.03 | May 10, 2022 | Windows Server Service Information Disclosure Vulnerability | ||
| CVE-2022-26935 | Med | 0.42 | 6.5 | 0.01 | May 10, 2022 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | ||
| CVE-2022-26934 | Med | 0.42 | 6.5 | 0.03 | May 10, 2022 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2022-22015 | Med | 0.42 | 6.5 | 0.02 | May 10, 2022 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | ||
| CVE-2022-24498 | Med | 0.42 | 6.5 | 0.02 | Apr 15, 2022 | Windows iSCSI Target Service Information Disclosure Vulnerability | ||
| CVE-2022-21915 | Med | 0.42 | 6.5 | 0.03 | Jan 11, 2022 | Windows GDI+ Information Disclosure Vulnerability | ||
| CVE-2019-1043 | Med | 0.42 | 6.4 | 0.03 | Jun 12, 2019 | A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the… | ||
| CVE-2017-0174 | Med | 0.42 | 6.5 | 0.03 | Aug 8, 2017 | Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka… | ||
| CVE-2016-3371 | Med | 0.42 | 5.5 | 0.40 | Sep 14, 2016 | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive… | ||
| CVE-2019-1053 | Med | 0.41 | 6.3 | 0.01 | Jun 12, 2019 | An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require… |
- risk 0.42cvss 6.4epss 0.00
Windows Group Policy Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows NTLM Spoofing Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Security Account Manager (SAM) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Hyper-V Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows WLAN AutoConfig Service Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows Server Service Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows iSCSI Target Service Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows GDI+ Information Disclosure Vulnerability
- risk 0.42cvss 6.4epss 0.03
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the…
- risk 0.42cvss 6.5epss 0.03
Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka…
- risk 0.42cvss 5.5epss 0.40
The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive…
- risk 0.41cvss 6.3epss 0.01
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require…
Page 54 of 132