microsoft windows server 2008

Name: microsoft windows server 2008
Brand: microsoft

productUS

cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

26critical1327high962medium109low

updated 2026-10-27

vulnerabilities (3,552)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-1635US	high10.0OT critical	100.0% (100th)	KEV	no fix	2015-04-14	= r2
CVE-2019-0708US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-05-16	2 versions
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	no fix	2021-07-02	2 versions
CVE-2017-0147US	high7.5OT critical	99.7% (100th)	KEV	no fix	2017-03-17	2 versions
CVE-2017-0199US	high7.8OT critical	99.5% (100th)	KEV	no fix	2017-04-12	2 versions
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	no fix	2023-07-11	2 versions
CVE-2020-1472US	high9.3OT critical	99.4% (100th)	KEV	no fix	2020-08-17	= r2
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	no fix	2022-06-01	= r2
CVE-2008-4250US	high10.0OT critical	98.8% (100th)	KEV	no fix	2008-10-23	—
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	no fix	2021-09-15	2 versions
CVE-2020-1350US	critical10.0OT critical	96.7% (100th)	KEV	no fix	2020-07-14	2 versions
CVE-2014-6332US	high9.3OT critical	94.9% (100th)	KEV	no fix	2014-11-11	2 versions
CVE-2017-8464US	high8.8OT critical	90.0% (100th)	KEV	no fix	2017-06-15	2 versions
CVE-2010-2568US	high9.3OT critical	89.6% (100th)	KEV	no fix	2010-07-22	2 versions
CVE-2018-8174US	high7.5OT critical	88.2% (100th)	KEV	no fix	2018-05-09	2 versions
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	2 versions
CVE-2014-6324US	high9.0OT critical	87.3% (100th)	KEV	no fix	2014-11-18	2 versions
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	no fix	2025-06-10	2 versions
CVE-2014-4113US	high7.2OT critical	86.6% (100th)	KEV	no fix	2014-10-15	2 versions
CVE-2015-2426US	high9.3OT critical	86.6% (100th)	KEV	no fix	2015-07-20	2 versions
CVE-2021-1675US	high9.3OT critical	85.3% (100th)	KEV	no fix	2021-06-08	2 versions
CVE-2013-3906US	high7.8OT critical	84.9% (100th)	KEV	no fix	2013-11-06	—
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	no fix	2024-11-12	2 versions
CVE-2017-0213US	high7.3OT critical	84.3% (100th)	KEV	no fix	2017-05-12	2 versions
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	—
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	no fix	2025-06-10	2 versions
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	no fix	2021-10-13	2 versions
CVE-2014-4114US	high9.3OT critical	81.6% (100th)	KEV	no fix	2014-10-15	2 versions
CVE-2016-7255US	high7.8OT critical	81.0% (100th)	KEV	no fix	2016-11-10	2 versions
CVE-2011-3402US	high8.8OT critical	78.1% (100th)	KEV	no fix	2011-11-04	—
CVE-2014-6352US	high7.8OT critical	77.5% (100th)	KEV	no fix	2014-10-22	2 versions
CVE-2021-42287US	medium6.5OT critical	77.2% (100th)	KEV	no fix	2021-11-10	2 versions
CVE-2015-0016US	high7.8OT critical	75.8% (100th)	KEV	no fix	2015-01-13	= r2
CVE-2019-1458US	high7.8OT critical	74.4% (99th)	KEV	no fix	2019-12-10	2 versions
CVE-2017-8543US	critical9.8OT critical	74.4% (99th)	KEV	no fix	2017-06-15	2 versions
CVE-2013-3918US	high8.8OT critical	73.7% (99th)	KEV	no fix	2013-11-12	2 versions
CVE-2021-42278US	medium6.5OT critical	73.3% (99th)	KEV	no fix	2021-11-10	2 versions
CVE-2018-8120US	high7.0OT critical	73.3% (99th)	KEV	no fix	2018-05-09	2 versions
CVE-2018-0824US	high8.8OT critical	73.0% (99th)	KEV	no fix	2018-05-09	2 versions
CVE-2018-8453US	high7.8OT critical	70.0% (99th)	KEV	no fix	2018-10-10	2 versions
CVE-2021-36942US	medium5.0OT critical	66.0% (99th)	KEV	no fix	2021-08-12	2 versions
CVE-2014-1812US	high9.0OT critical	65.1% (99th)	KEV	no fix	2014-05-14	2 versions
CVE-2020-1020US	high8.8OT critical	65.0% (99th)	KEV	no fix	2020-04-15	2 versions
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	no fix	2025-03-11	= r2
CVE-2017-0101US	high7.8OT critical	57.5% (99th)	KEV	no fix	2017-03-17	—
CVE-2015-1701US	high7.8OT critical	55.9% (99th)	KEV	no fix	2015-04-21	—
CVE-2020-1054US	high7.0OT critical	53.9% (99th)	KEV	no fix	2020-05-21	2 versions
CVE-2019-0808US	high7.8OT critical	53.0% (99th)	KEV	no fix	2019-04-09	2 versions
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	no fix	2023-04-11	2 versions
CVE-2019-0803US	high7.8OT critical	45.2% (99th)	KEV	no fix	2019-04-09	2 versions

showing 50 of 3,552

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation580 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor513 CVEs
CWE-264CWE-264472 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer435 CVEs
CWE-269Improper Privilege Management338 CVEs
CWE-122Heap-based Buffer Overflow211 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')196 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')169 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE3,552 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan