Known vulnerabilities in Windows Server 2008 R2 SP1 - page 12

Vendor: Microsoft
Software: Windows Server
Version: 2008 R2 SP1
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 470
Public exploits: 16
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2008 R2 SP1 Windows Server 2008 R2 SP1 is affected by 470 vulnerabilities: 7 critical, 142 high, 93 medium, 228 low Critical High Medium Low

Vulnerabilities (470)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102605 - Heap-based Buffer Overflow
CVE-2025-21409		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102604 - Heap-based Buffer Overflow
CVE-2025-21413		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU86411 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-21405		 CWE-362 Low
No
No
 - 13.02.2024 SB2024021343
#VU85242 - Security Features
CVE-2024-20652		 CWE-254 Medium
No
No
 - 09.01.2024 SB2024010999
#VU79263 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20569		 CWE-200 Low
No
No
 - 08.08.2023 SB20230808145
SB20230808146
SB2023080902
and 86 more
#VU79239 - Divide By Zero
CVE-2023-20588		 CWE-369 Low
No
No
 - 08.08.2023 SB20230808103
SB2023082053
SB2023091104
and 64 more
#VU69070 - Memory corruption
CVE-2022-41128		 CWE-119 Critical
No
Exploited
 - 08.11.2022 SB2022110809
#VU69065 - Memory corruption
CVE-2022-41073		 CWE-119 High
No
Exploited
 - 08.11.2022 SB2022110805
#VU68240 - Security Features
CVE-2022-38032		 CWE-254 Low
No
No
 - 12.10.2022 SB2022101232
#VU68239 - Improper input validation
CVE-2022-37981		 CWE-20 Low
No
No
 - 12.10.2022 SB2022101231
#VU68238 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-38029		 CWE-362 Low
No
No
 - 12.10.2022 SB2022101230
#VU68237 - Permissions, Privileges, and Access Controls
CVE-2022-38028		 CWE-264 High
No
Exploited
 - 12.10.2022 SB2022101229
#VU68236 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-37979		 CWE-362 Low
No
No
 - 12.10.2022 SB2022101228
#VU68235 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-38027		 CWE-362 Low
No
No
 - 12.10.2022 SB2022101227
#VU68234 - Improper input validation
CVE-2022-37977		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101226
#VU68232 - Permissions, Privileges, and Access Controls
CVE-2022-37975		 CWE-264 Low
No
No
 - 12.10.2022 SB2022101224
#VU68230 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-38021		 CWE-362 Low
No
No
 - 12.10.2022 SB2022101222
#VU68229 - Permissions, Privileges, and Access Controls
CVE-2022-38016		 CWE-264 Low
No
No
 - 12.10.2022 SB2022101221
#VU68228 - Permissions, Privileges, and Access Controls
CVE-2022-38050		 CWE-264 Low
No
No
 - 12.10.2022 SB2022101220
#VU68227 - Permissions, Privileges, and Access Controls
CVE-2022-37970		 CWE-264 Low
No
No
 - 12.10.2022 SB2022101219


Showing elements 221 - 240 out of 470