VendorsMicrosoftwindows_server_2008all versions
Vulnerabilities

Microsoft Windows Server 2008 for 32-bit Systems

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4076CVEs
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
9.8EPSS 0.326
CVE-2009-2512
The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."
Published 2009-11-11 · Modified
9.8EPSS 0.312
CVE-2012-1891
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
Published 2012-07-10 · Modified
9.8EPSS 0.294
CVE-2019-0725
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
Published 2019-05-16 · Modified
9.8EPSS 0.282
CVE-2023-21690
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.275
CVE-2023-21689
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.265
CVE-2021-24074
Windows TCP/IP Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.257
CVE-2021-24094
Windows TCP/IP Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.221
CVE-2023-21692
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.212
CVE-2025-55234
Windows SMB Elevation of Privilege Vulnerability
Published 2025-09-09 · Modified
9.8EPSS 0.201
CVE-2023-36397
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Published 2023-11-14 · Modified
9.8EPSS 0.175
CVE-2021-26877
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
9.8EPSS 0.165
CVE-2008-3465
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
Published 2008-12-10 · Modified
9.8EPSS 0.137
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Published 2023-11-14 · Modified
9.8EPSS 0.125
CVE-2021-24078
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.119
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
9.8EPSS 0.080
CVE-2021-36936
Windows Print Spooler Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
9.8EPSS 0.074
CVE-2021-26893
Windows DNS Server Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
9.8EPSS 0.070
CVE-2019-1212
Windows DHCP Server Denial of Service Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.067
CVE-2021-43217
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
9.8EPSS 0.064
CVE-2025-60724
GDI+ Remote Code Execution Vulnerability
Published 2025-11-11 · Analyzed
9.8EPSS 0.059
CVE-2023-24943
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Published 2023-05-09 · Modified
9.8EPSS 0.047
CVE-2021-36965
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
Published 2021-09-15 · Modified
9.8EPSS 0.046
CVE-2019-1213
Windows DHCP Server Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.042
CVE-2022-22012
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.040
CVE-2019-0736
Windows DHCP Client Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.040
CVE-2024-38140
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published 2024-08-13 · Modified
9.8EPSS 0.038
CVE-2021-31962
Kerberos AppContainer Security Feature Bypass Vulnerability
Published 2021-06-08 · Modified
9.8EPSS 0.038
CVE-2022-29130
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.038
CVE-2023-23415
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Published 2023-03-14 · Modified
9.8EPSS 0.035
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
9.8EPSS 0.032
CVE-2021-33757
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Published 2021-07-14 · Modified
9.8EPSS 0.029
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.029
CVE-2022-34722
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
9.8EPSS 0.028
CVE-2023-35349
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-10-10 · Modified
9.8EPSS 0.028
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Published 2024-01-09 · Modified
9.8EPSS 0.028
CVE-2021-43215
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Published 2021-12-15 · Modified
9.8EPSS 0.027
CVE-2022-30133
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Published 2022-08-09 · Modified
9.8EPSS 0.027
CVE-2023-36910
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
9.8EPSS 0.025
CVE-2023-35385
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
9.8EPSS 0.025
← Prev3 / 102Next →