Microsoft Windows Server 2008 SP2

productDE

cpe:/o:microsoft:windows_server_2008::sp2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical34high17medium1low

updated 2026-10-27

vulnerabilities (91)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1405US	high7.8OT critical	30.2% (98th)	KEV	no fix	2019-11-12	—
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	no fix	2023-06-14	—
CVE-2019-1388US	high7.8OT critical	8.59% (95th)	KEV	no fix	2019-11-12	—
CVE-2019-1385US	high7.8OT critical	3.60% (89th)	KEV	no fix	2019-11-12	—
CVE-2019-1422US	high7.8	2.07% (81st)	Exploit	no fix	2019-11-12	—
CVE-2019-1439US	medium6.5	74.8% (100th)	—	no fix	2019-11-12	—
CVE-2019-1234US	high7.5	74.6% (99th)	—	no fix	2019-11-12	—
CVE-2019-1430US	high7.8	13.8% (97th)	—	no fix	2019-11-12	—
CVE-2019-1406US	high7.8	13.3% (96th)	—	no fix	2019-11-12	—
CVE-2019-1441US	high8.8	12.8% (96th)	—	no fix	2019-11-12	—
CVE-2019-0721US	critical9.1	12.1% (96th)	—	no fix	2019-11-12	—
CVE-2019-1419US	high8.8	11.6% (96th)	—	no fix	2019-11-12	—
CVE-2019-1456US	high8.8	9.70% (95th)	—	no fix	2019-11-12	—
CVE-2019-1384US	critical9.9	7.65% (95th)	—	no fix	2019-11-12	—
CVE-2019-1374US	medium5.5	7.07% (94th)	—	no fix	2019-11-12	—
CVE-2019-1432US	medium6.5	5.58% (93rd)	—	no fix	2019-11-12	—
CVE-2019-0712US	medium6.8	5.55% (93rd)	—	no fix	2019-11-12	—
CVE-2019-1310US	medium6.8	5.50% (93rd)	—	no fix	2019-11-12	—
CVE-2019-1309US	medium6.8	5.50% (93rd)	—	no fix	2019-11-12	—
CVE-2023-29371US	—	5.39% (93rd)	—	no fix	2023-06-14	—
CVE-2019-1411US	medium6.5	5.23% (92nd)	—	no fix	2019-11-12	—
CVE-2019-1397US	high8.4	4.88% (92nd)	—	no fix	2019-11-12	—
CVE-2019-1389US	high8.4	4.88% (92nd)	—	no fix	2019-11-12	—
CVE-2023-29358US	—	4.73% (92nd)	—	no fix	2023-06-14	—
CVE-2019-1324US	medium5.3	4.62% (92nd)	—	no fix	2019-11-12	—
CVE-2023-29361US	—OT elevated	3.98% (90th)	—	no fix	2023-06-14	—
CVE-2019-1398US	high8.4	3.33% (89th)	—	no fix	2019-11-12	—
CVE-2019-1424US	high8.1	3.07% (88th)	—	no fix	2019-11-12	—
CVE-2019-1440US	medium5.5	2.09% (82nd)	—	no fix	2019-11-12	—
CVE-2023-24937US	—	2.08% (81st)	—	no fix	2023-06-14	—
CVE-2023-32015US	—	2.04% (81st)	—	no fix	2023-06-14	—
CVE-2023-29369US	—	1.98% (80th)	—	no fix	2023-06-14	—
CVE-2023-24938US	—	1.98% (80th)	—	no fix	2023-06-14	—
CVE-2023-32014US	—	1.94% (80th)	—	no fix	2023-06-14	—
CVE-2023-29363US	—	1.94% (80th)	—	no fix	2023-06-14	—
CVE-2023-32011US	—	1.94% (80th)	—	no fix	2023-06-14	—
CVE-2023-29351US	—	1.80% (78th)	—	no fix	2023-06-14	—
CVE-2019-1436US	medium5.5	1.78% (78th)	—	no fix	2019-11-12	—
CVE-2019-1418US	low3.3	1.75% (78th)	—	no fix	2019-11-12	—
CVE-2019-1399US	medium6.2	1.71% (77th)	—	no fix	2019-11-12	—
CVE-2019-1412US	medium5.5	1.70% (77th)	—	no fix	2019-11-12	—
CVE-2023-32013US	—	1.64% (76th)	—	no fix	2023-06-14	—
CVE-2019-1381US	medium5.5	1.56% (75th)	—	no fix	2019-11-12	—
CVE-2019-1423US	high7.8	1.43% (73rd)	—	no fix	2019-11-12	—
CVE-2019-1393US	high7.8	1.42% (73rd)	—	no fix	2019-11-12	—
CVE-2019-1408US	high7.8	1.42% (73rd)	—	no fix	2019-11-12	—
CVE-2019-1409US	medium5.5	1.40% (72nd)	—	no fix	2019-11-12	—
CVE-2023-32019US	—	1.37% (72nd)	—	no fix	2023-06-14	—
CVE-2023-29373US	—	1.35% (71st)	—	no fix	2023-06-14	—
CVE-2023-29372US	—	1.35% (71st)	—	no fix	2023-06-14	—

showing 50 of 91

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation31 CVEs
CWE-269Improper Privilege Management31 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor14 CVEs
CWE-264CWE-2649 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')6 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)91 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan