Known vulnerabilities in Windows Server 2008 R2 - page 17

Vendor: Microsoft
Version: 2008 R2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 2268
Public exploits: 237
Known exploited (KEV): 122
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2008 R2 Windows Server 2008 R2 is affected by 2268 vulnerabilities: 40 critical, 492 high, 504 medium, 1232 low Critical High Medium Low

Vulnerabilities (2268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75933 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24945
CWE-200 Low
No
No
- 09.05.2023 SB20230509120
#VU75927 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24900
CWE-200 Medium
No
No
- 09.05.2023 SB20230509115
#VU75921 - Improper input validation
CVE-2023-24942
CWE-20 Medium
No
No
- 09.05.2023 SB20230509111
#VU75919 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-24903
CWE-362 High
No
No
- 09.05.2023 SB20230509110
#VU75916 - Improper input validation
CVE-2023-24940
CWE-20 Medium
No
No
- 09.05.2023 SB20230509104
#VU75914 - Improper input validation
CVE-2023-24943
CWE-20 High
No
No
- 09.05.2023 SB20230509104
#VU75904 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-29325
CWE-362 High
No
No
- 09.05.2023 SB2023050998
#VU75901 - Security Features
CVE-2023-24932
CWE-254 High
No
Exploited
- 09.05.2023 SB2023050995
SB2023091913
SB2024061230
#VU75900 - Use After Free
CVE-2023-29336
CWE-416 High
Public exploit available
Exploited
- 09.05.2023 SB2023050994
#VU75893 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28283
CWE-362 High
No
No
- 09.05.2023 SB2023050984
#VU75892 - Permissions, Privileges, and Access Controls
CVE-2023-24904
CWE-264 Low
No
No
- 09.05.2023 SB2023050983
#VU75018 - Security Features
CVE-2023-28276
CWE-254 Low
No
No
- 12.04.2023 SB2023041217
#VU75013 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-28228
CWE-451 Medium
No
No
- 12.04.2023 SB2023041213
#VU75012 - Improper input validation
CVE-2023-28275
CWE-20 High
No
No
- 12.04.2023 SB2023041211
#VU75011 - Out-of-bounds write
CVE-2023-21554
CWE-787 High
Public exploit available
No
- 12.04.2023 SB2023041210
SB2024022623
#VU75009 - Improper input validation
CVE-2023-21769
CWE-20 Medium
Public exploit available
No
- 12.04.2023 SB2023041210
#VU74993 - Permissions, Privileges, and Access Controls
CVE-2023-24912
CWE-264 Low
No
No
- 12.04.2023 SB2023041202
#VU74992 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28219
CWE-362 High
No
No
- 12.04.2023 SB2023041201
#VU74991 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28220
CWE-362 High
No
No
- 11.04.2023 SB2023041201
#VU74989 - Improper input validation
CVE-2023-28223
CWE-20 Low
No
No
- 11.04.2023 SB20230411106


Showing elements 321 - 340 out of 2268