Known vulnerabilities in Windows Server 2008 SP2 - page 6

Vendor: Microsoft
Software: Windows Server
Version: 2008 SP2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 419
Public exploits: 12
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2008 SP2 Windows Server 2008 SP2 is affected by 419 vulnerabilities: 7 critical, 130 high, 80 medium, 202 low Critical High Medium Low

Vulnerabilities (419)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103774 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21377		 CWE-200 Medium
No
Exploited
 2008 R2 6.1.7601.27566, 2008 6.0.6003.23117, 2012 R2 6.3.9600.22417, 2012 6.2.9200.25317, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1425, 2022 10.0.20348.3148, 2022 10.0.20348.3207, 2025 10.0.26100.3107, 2025 10.0.26100.3194 11.02.2025 SB2025021188
#VU103773 - Resource exhaustion
CVE-2025-21352		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27566, 2008 6.0.6003.23117, 2012 R2 6.3.9600.22417, 2012 6.2.9200.25317, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1425, 2022 10.0.20348.3148, 2022 10.0.20348.3207, 2025 10.0.26100.3107, 2025 10.0.26100.3194 11.02.2025 SB2025021189
#VU102794 - Out-of-bounds read
CVE-2025-21215		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011541
#VU102790 - Improper Resolution of Path Equivalence
CVE-2025-21329		 CWE-41 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011540
#VU102789 - Improper Resolution of Path Equivalence
CVE-2025-21328		 CWE-41 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091 15.01.2025 SB2025011540
#VU102783 - Resource exhaustion
CVE-2025-21231		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011529
#VU102782 - Improper Resolution of Path Equivalence
CVE-2025-21269		 CWE-41 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091 15.01.2025 SB2025011528
#VU102779 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21336		 CWE-200 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011525
#VU102751 - Resource exhaustion
CVE-2025-21300		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114117
#VU102750 - Resource exhaustion
CVE-2025-21389		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114117
#VU102731 - Protection Mechanism Failure
CVE-2025-21217		 CWE-693 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011492
#VU102728 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-21294		 CWE-591 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011491
#VU102713 - Use of Uninitialized Resource
CVE-2025-21272		 CWE-908 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011483
#VU102711 - Use of Uninitialized Resource
CVE-2025-21288		 CWE-908 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011483
#VU102700 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21214		 CWE-200 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011472
#VU102699 - Not Failing Securely (\'Failing Open\')
CVE-2025-21210		 CWE-636 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011472
#VU102692 - Improper Privilege Management
CVE-2025-21287		 CWE-269 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011467
#VU102691 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-21331		 CWE-59 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091 14.01.2025 SB2025011467
#VU102690 - Use of Uninitialized Resource
CVE-2025-21220		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011466
#VU102683 - NULL Pointer Dereference
CVE-2025-21285		 CWE-476 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465


Showing elements 101 - 120 out of 419