VendorsMicrosoftwindows_server_2008all versions
Vulnerabilities

Microsoft Windows Server 2008

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4076CVEs
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
9.8EPSS 0.411
CVE-2009-2512
The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."
Published 2009-11-11 · Modified
9.8EPSS 0.312
CVE-2012-1891
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
Published 2012-07-10 · Modified
9.8EPSS 0.294
CVE-2019-0725
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
Published 2019-05-16 · Modified
9.8EPSS 0.282
CVE-2023-21690
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.277
CVE-2023-21689
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.267
CVE-2021-24074
Windows TCP/IP Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.262
CVE-2021-24094
Windows TCP/IP Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.221
CVE-2023-21692
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.214
CVE-2025-55234
Windows SMB Elevation of Privilege Vulnerability
Published 2025-09-09 · Modified
9.8EPSS 0.208
CVE-2023-36397
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Published 2023-11-14 · Modified
9.8EPSS 0.175
CVE-2021-26877
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
9.8EPSS 0.173
CVE-2008-3465
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
Published 2008-12-10 · Modified
9.8EPSS 0.137
CVE-2021-24078
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.119
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
9.8EPSS 0.085
CVE-2021-36936
Windows Print Spooler Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
9.8EPSS 0.075
CVE-2021-26893
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
9.8EPSS 0.070
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Published 2023-11-14 · Modified
9.8EPSS 0.068
CVE-2019-1212
Windows DHCP Server Denial of Service Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.067
CVE-2021-43217
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
9.8EPSS 0.065
CVE-2025-60724
GDI+ Remote Code Execution Vulnerability
Published 2025-11-11 · Analyzed
9.8EPSS 0.063
CVE-2023-24943
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Published 2023-05-09 · Modified
9.8EPSS 0.047
CVE-2021-36965
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
Published 2021-09-15 · Modified
9.8EPSS 0.047
CVE-2019-1213
Windows DHCP Server Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.042
CVE-2022-22012
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.042
CVE-2019-0736
Windows DHCP Client Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.040
CVE-2022-29130
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.039
CVE-2024-38140
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published 2024-08-13 · Modified
9.8EPSS 0.038
CVE-2021-31962
Kerberos AppContainer Security Feature Bypass Vulnerability
Published 2021-06-08 · Modified
9.8EPSS 0.038
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
9.8EPSS 0.035
CVE-2023-23415
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Published 2023-03-14 · Modified
9.8EPSS 0.035
CVE-2022-34722
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
9.8EPSS 0.030
CVE-2021-33757
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Published 2021-07-14 · Modified
9.8EPSS 0.030
CVE-2023-35349
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-10-10 · Modified
9.8EPSS 0.029
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.029
CVE-2021-43215
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Published 2021-12-15 · Modified
9.8EPSS 0.029
CVE-2022-30133
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Published 2022-08-09 · Modified
9.8EPSS 0.028
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Published 2024-01-09 · Modified
9.8EPSS 0.028
CVE-2023-36910
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
9.8EPSS 0.025
CVE-2023-35385
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
9.8EPSS 0.025
← Prev3 / 102Next →