VendorsMicrosoftwindows_server_2008r2
Vulnerabilities

Microsoft Windows Server 2008 for 32-bit Systems r2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3562CVEs
CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8KEVEPSS 0.027
CVE-2019-0881
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Modified
7.81 PoCEPSS 0.026
CVE-2016-3310
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3311.
Published 2016-08-09 · Modified
7.8EPSS 0.026
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Published 2021-06-08 · Analyzed
7.8KEVEPSS 0.026
CVE-2020-1015
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
Published 2020-04-15 · Modified
7.8EPSS 0.026
CVE-2026-20820
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.026
CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability
Published 2023-01-10 · Modified
7.8EPSS 0.025
CVE-2020-1477
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.025
CVE-2020-1066
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects., aka '.NET Framework Elevation of Privilege Vulnerability'.
Published 2020-05-21 · Modified
7.8EPSS 0.025
CVE-2016-0174
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0173, and CVE-2016-0196.
Published 2016-05-11 · Modified
7.8EPSS 0.025
CVE-2026-20816
Windows Installer Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.025
CVE-2021-40465
Windows Text Shaping Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2025-24052
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.025
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2020-16939
Group Policy Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.024
CVE-2016-0014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Elevation of Privilege Vulnerability."
Published 2016-01-13 · Modified
7.8EPSS 0.024
CVE-2025-60705
Windows Client-Side Caching Elevation of Privilege Vulnerability
Published 2025-11-11 · Analyzed
7.8EPSS 0.024
CVE-2019-0943
Windows ALPC Elevation of Privilege Vulnerability
Published 2019-06-12 · Modified
7.81 PoCEPSS 0.024
CVE-2016-3355
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevation of Privilege Vulnerability."
Published 2016-09-14 · Modified
7.8EPSS 0.023
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.023
CVE-2020-0753
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.
Published 2020-02-11 · Modified
7.8EPSS 0.023
CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.023
CVE-2025-54916
Windows NTFS Remote Code Execution Vulnerability
Published 2025-09-09 · Analyzed
7.8EPSS 0.023
CVE-2021-36937
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.023
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-11-09 · Analyzed
7.8KEVEPSS 0.023
CVE-2021-27089
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.023
CVE-2020-0887
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
Published 2020-03-12 · Modified
7.8EPSS 0.022
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
Published 2025-12-09 · Modified
7.8EPSS 0.022
CVE-2022-30206
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.022
CVE-2016-3306
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3305.
Published 2016-09-14 · Modified
7.8EPSS 0.022
CVE-2025-62472
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2025-12-09 · Analyzed
7.8EPSS 0.022
CVE-2021-34441
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2021-07-16 · Modified
7.8EPSS 0.022
CVE-2016-7221
Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via unspecified vectors, aka "Windows IME Elevation of Privilege Vulnerability."
Published 2016-11-10 · Modified
7.8EPSS 0.022
CVE-2025-24993
Windows NTFS Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8KEVEPSS 0.022
CVE-2022-22027
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.022
CVE-2025-32709
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.021
CVE-2016-7259
The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.021
CVE-2022-37955
Windows Group Policy Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.021
CVE-2020-0965
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
7.8EPSS 0.021
CVE-2016-0048
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2016-02-10 · Modified
7.8EPSS 0.021
← Prev32 / 90Next →