Known vulnerabilities in Windows Server 2008 R2 - page 2

Vendor: Microsoft
Software: Windows Server
Version: 2008 R2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 2268
Public exploits: 237
Known exploited (KEV): 122
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2008 R2 Windows Server 2008 R2 is affected by 2268 vulnerabilities: 40 critical, 492 high, 504 medium, 1232 low Critical High Medium Low

Vulnerabilities (2268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119434 - Integer overflow
CVE-2025-62467		 CWE-190 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119433 - Out-of-bounds read
CVE-2025-55233		 CWE-125 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119432 - Out-of-bounds read
CVE-2025-62464		 CWE-125 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119431 - Use After Free
CVE-2025-62221		 CWE-416 High
No
Exploited
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120947
#VU88429 - Resource exhaustion
CVE-2024-26215		 CWE-400 Medium
No
No
 - 10.04.2024 SB2024041073
#VU88428 - Heap-based Buffer Overflow
CVE-2024-26229		 CWE-122 Low
Public exploit available
No
 - 10.04.2024 SB2024041072
#VU88422 - Heap-based Buffer Overflow
CVE-2024-26214		 CWE-122 High
No
No
 - 10.04.2024 SB2024041065
#VU88421 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-26158		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041064
#VU88419 - Improper input validation
CVE-2024-26253		 CWE-20 Low
No
No
 - 10.04.2024 SB2024041062
#VU88418 - Untrusted Pointer Dereference
CVE-2024-26252		 CWE-822 Low
No
No
 - 10.04.2024 SB2024041062
#VU88401 - Improper input validation
CVE-2024-26240		 CWE-20 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88396 - Stack-based buffer overflow
CVE-2024-28925		 CWE-121 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88393 - Improper Verification of Cryptographic Signature
CVE-2024-26194		 CWE-347 Low
No
No
 - 10.04.2024 SB2024041061
#VU88390 - Use After Free
CVE-2024-26241		 CWE-416 Low
No
No
 - 10.04.2024 SB2024041055
#VU88384 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-29056		 CWE-327 Low
No
No
 - 10.04.2024 SB2024041051
#VU88383 - Use After Free
CVE-2024-26230		 CWE-416 Low
Public exploit available
No
 - 10.04.2024 SB2024041048
#VU88382 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-26216		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041043
#VU88379 - Improper Access Control
CVE-2024-26234		 CWE-284 High
No
Exploited
 - 10.04.2024 SB2024041035
#VU88371 - Incorrect Implementation of Authentication Algorithm
CVE-2024-26248		 CWE-303 Medium
No
No
 - 10.04.2024 SB2024041021
#VU88370 - NULL Pointer Dereference
CVE-2024-26183		 CWE-476 Medium
No
No
 - 10.04.2024 SB2024041021


Showing elements 21 - 40 out of 2268