Microsoft Corp Windows Server 2008 R2 Service Pack 2

Name: Microsoft Corp Windows Server 2008 R2 Service Pack 2
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical32high36medium7low

updated 2026-10-28

vulnerabilities (163)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	no fix	2022-06-01	—
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	no fix	2021-09-15	—
CVE-2013-3900US	high7.6OT critical	44.6% (99th)	KEV	no fix	2013-12-11	—
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	no fix	2022-02-09	—
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	—
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	no fix	2022-09-13	—
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	no fix	2022-02-09	—
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	—
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	no fix	2020-11-11	—
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	no fix	2021-11-10	—
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	no fix	2022-07-12	—
CVE-2024-38217US	—OT critical	10.0% (96th)	KEV	no fix	2024-09-10	—
CVE-2024-38014US	—OT critical	6.26% (94th)	KEV	no fix	2024-09-10	—
CVE-2025-21298US	—	74.4% (99th)	Exploit	no fix	2025-01-14	—
CVE-2022-34718US	—	54.7% (99th)	Exploit	no fix	2022-09-13	—
CVE-2021-38666US	medium6.8	15.2% (97th)	Exploit	no fix	2021-11-10	—
CVE-2015-2553US	high7.2	3.04% (87th)	Exploit	no fix	2015-10-14	—
CVE-2022-30206US	high7.2	2.22% (83rd)	Exploit	no fix	2022-07-12	—
CVE-2023-21563US	—	1.50% (74th)	Exploit	no fix	2023-01-10	—
CVE-2022-30203US	medium4.6OT elevated	1.49% (74th)	Exploit	no fix	2022-07-12	—
CVE-2022-34721US	—	76.2% (100th)	—	no fix	2022-09-13	—
CVE-2023-36606US	—	69.4% (99th)	—	no fix	2023-10-10	—
CVE-2018-8476US	critical9.8	64.8% (99th)	—	no fix	2018-11-14	—
CVE-2024-30080US	—	43.1% (99th)	—	no fix	2024-06-11	—
CVE-2022-22025US	medium5.0	32.7% (98th)	—	no fix	2022-07-12	—
CVE-2015-2515US	high9.3	28.7% (98th)	—	no fix	2015-10-14	—
CVE-2022-35803US	—	23.8% (98th)	—	no fix	2022-09-13	—
CVE-2017-0250US	high7.8	23.7% (98th)	—	no fix	2017-08-08	—
CVE-2020-1599US	low2.1	19.1% (97th)	—	no fix	2020-11-11	—
CVE-2024-43532US	—	12.0% (96th)	—	no fix	2024-10-08	—
CVE-2024-30050US	—	11.5% (96th)	—	no fix	2024-05-14	—
CVE-2014-0317US	medium5.4	10.4% (96th)	—	no fix	2014-03-12	—
CVE-2024-30087US	—	9.50% (95th)	—	no fix	2024-06-11	—
CVE-2022-35793US	—	9.36% (95th)	—	no fix	2022-08-09	—
CVE-2025-53143US	—	8.75% (95th)	—	no fix	2025-08-12	—
CVE-2023-36594US	—	8.64% (95th)	—	no fix	2023-10-10	—
CVE-2025-53145US	—	8.22% (95th)	—	no fix	2025-08-12	—
CVE-2024-21437US	—	8.03% (95th)	—	no fix	2024-03-12	—
CVE-2019-0882US	medium6.5	6.99% (94th)	—	no fix	2019-05-16	—
CVE-2023-36731US	—	6.62% (94th)	—	no fix	2023-10-10	—
CVE-2022-22034US	high7.2	6.25% (94th)	—	no fix	2022-07-12	—
CVE-2022-35751US	—	5.46% (93rd)	—	no fix	2023-05-31	—
CVE-2024-30037US	—	5.27% (93rd)	—	no fix	2024-05-14	—
CVE-2020-17042US	high9.3	5.11% (92nd)	—	no fix	2020-11-11	—
CVE-2022-30202US	medium6.9	4.47% (91st)	—	no fix	2022-07-12	—
CVE-2022-22000US	high7.2	4.33% (91st)	—	no fix	2022-02-09	—
CVE-2022-22012US	high9.3	4.18% (91st)	—	no fix	2022-05-10	—
CVE-2022-29130US	high9.3	3.93% (90th)	—	no fix	2022-05-10	—
CVE-2022-21880US	high7.8	3.88% (90th)	—	no fix	2022-01-11	—
CVE-2023-36743US	—	3.63% (89th)	—	no fix	2023-10-10	—

showing 50 of 163

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation37 CVEs
CWE-264CWE-26430 CVEs
CWE-269Improper Privilege Management18 CVEs
CWE-416Use After Free14 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')9 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)162 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan