Microsoft Corp Windows Server 2008 Service Pack 1
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
1critical3high10medium0low
updated 2026-10-30
01
vulnerabilities (30)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2018-8174US | high7.5OT critical | KEV | ||||
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… | ||||||
| CVE-2023-24932US | —OT elevated | Exploit | ||||
Secure Boot Security Feature Bypass Vulnerability | ||||||
| CVE-2017-11771US | critical9.8 | — | ||||
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold… | ||||||
| CVE-2023-38152US | — | — | ||||
DHCP Server Service Information Disclosure Vulnerability | ||||||
| CVE-2019-0882US | medium6.5 | — | ||||
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability… | ||||||
| CVE-2020-0946US | medium5.5 | — | ||||
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID… | ||||||
| CVE-2021-26435US | medium6.8 | — | ||||
Windows Scripting Engine Memory Corruption Vulnerability | ||||||
| CVE-2023-29358US | — | — | ||||
Windows GDI Elevation of Privilege Vulnerability | ||||||
| CVE-2022-21883US | high7.1 | — | ||||
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||||||
| CVE-2022-21848US | high7.1 | — | ||||
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||||||
| CVE-2020-0718US | medium6.5 | — | ||||
<p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the… | ||||||
| CVE-2022-21890US | medium4.3 | — | ||||
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||||||
| CVE-2022-21889US | medium4.3 | — | ||||
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||||||
| CVE-2018-8336US | medium5.5 | — | ||||
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects… | ||||||
| CVE-2014-4064US | medium4.9 | — | ||||
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT G… | ||||||
| CVE-2021-33749US | medium6.8 | — | ||||
Windows DNS Snap-in Remote Code Execution Vulnerability | ||||||
| CVE-2023-24942US | — | — | ||||
Remote Procedure Call Runtime Denial of Service Vulnerability | ||||||
| CVE-2023-21811US | — | — | ||||
Windows iSCSI Service Denial of Service Vulnerability | ||||||
| CVE-2022-22035US | — | — | ||||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | ||||||
| CVE-2022-30198US | — | — | ||||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | ||||||
| CVE-2023-36722US | — | — | ||||
Active Directory Domain Services Information Disclosure Vulnerability | ||||||
| CVE-2023-24900US | — | — | ||||
Windows NTLM Security Support Provider Information Disclosure Vulnerability | ||||||
| CVE-2023-24903US | — | — | ||||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | ||||||
| CVE-2024-38245US | — | — | ||||
Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||||||
| CVE-2020-1538US | medium4.6 | — | ||||
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.
To exploit this vulnerability, an attacker would first have to gain exec… | ||||||
| CVE-2023-21805US | — | — | ||||
Windows MSHTML Platform Remote Code Execution Vulnerability | ||||||
| CVE-2023-21802US | — | — | ||||
Windows Media Remote Code Execution Vulnerability | ||||||
| CVE-2023-23409US | — | — | ||||
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability | ||||||
| CVE-2023-23394US | — | — | ||||
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability | ||||||
| CVE-2023-23385US | — | — | ||||
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
- CWE-20Improper Input Validation5 CVEs
- CWE-126Buffer Over-read3 CVEs
- CWE-264CWE-2643 CVEs
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization3 CVEs
- CWE-404Improper Resource Shutdown or Release3 CVEs
- CWE-668Exposure of Resource to Wrong Sphere3 CVEs
03
sources (1)
Which sources assert this record, and when.
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan