VendorsMicrosoftwindows_server_2008r2
Vulnerabilities

Microsoft Windows Server 2008 for 32-bit Systems r2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3562CVEs
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2023-11-14 · Analyzed
7.8KEVEPSS 0.167
CVE-2022-24481
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.166
CVE-2020-1048
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
Published 2020-05-21 · Modified
7.8EPSS 0.164
CVE-2017-11781
The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a denial of service vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability".
Published 2017-10-13 · Modified
7.8EPSS 0.144
CVE-2020-1337
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.141
CVE-2025-29824
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2025-04-08 · Analyzed
7.8KEVEPSS 0.139
CVE-2016-0165
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.
Published 2016-04-12 · Analyzed
7.8KEV1 PoCEPSS 0.137
CVE-2020-0708
A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting how the Windows Imaging Library handles memory., aka 'Windows Imaging Library Remote Code Execution Vulnerability'.
Published 2020-02-11 · Modified
7.8EPSS 0.135
CVE-2024-26158
Microsoft Install Service Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.123
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-11-14 · Analyzed
7.8KEVEPSS 0.122
CVE-2021-43883
Windows Installer Elevation of Privilege Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.120
CVE-2022-29104
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.118
CVE-2023-36594
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.116
CVE-2018-8206
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-07-11 · Modified
7.8EPSS 0.115
CVE-2019-1159
Windows Kernel Elevation of Privilege Vulnerability
Published 2019-08-14 · Modified
7.8EPSS 0.113
CVE-2022-35756
Windows Kerberos Elevation of Privilege Vulnerability
Published 2023-05-31 · Modified
7.8EPSS 0.113
CVE-2017-0005
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.
Published 2017-03-17 · Analyzed
7.8KEVEPSS 0.110
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-02-14 · Analyzed
7.8KEVEPSS 0.109
CVE-2023-36900
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.106
CVE-2022-34729
Windows GDI Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.105
CVE-2024-38054
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.104
CVE-2011-1869
The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
Published 2011-06-16 · Modified
7.8EPSS 0.103
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
Published 2023-07-11 · Analyzed
7.8KEVEPSS 0.100
CVE-2017-0263
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2017-05-12 · Analyzed
7.8KEV1 PoCEPSS 0.100
CVE-2023-35359
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.099
CVE-2019-0879
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.
Published 2019-04-09 · Modified
7.8EPSS 0.098
CVE-2019-1132
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Published 2019-07-29 · Analyzed
7.8KEV1 PoCEPSS 0.098
CVE-2024-30087
Win32k Elevation of Privilege Vulnerability
Published 2024-06-11 · Modified
7.8EPSS 0.095
CVE-2024-26229
Windows CSC Service Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.094
CVE-2022-37989
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.093
CVE-2021-31959
Scripting Engine Memory Corruption Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.092
CVE-2022-24542
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.092
CVE-2022-37987
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.091
CVE-2019-1484
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
Published 2019-12-10 · Modified
7.8EPSS 0.089
CVE-2023-35633
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-12-12 · Modified
7.8EPSS 0.087
CVE-2010-4398
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
Published 2010-12-03 · Analyzed
7.8KEV1 PoCEPSS 0.087
CVE-2019-1388
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
Published 2019-11-12 · Analyzed
7.8KEVEPSS 0.086
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."
Published 2018-04-02 · Modified
7.81 PoCEPSS 0.085
CVE-2026-20860
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.084
CVE-2022-41109
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-11-09 · Modified
7.8EPSS 0.081
← Prev28 / 90Next →