WS
Product
Windows Server 2008 Service Pack 2 (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
1,251
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 43High 449Medium 8Low 0
Watch
Add Windows Server 2008 Service Pack 2 (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34726 | 8.8 | Sep 13 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21666 |
| CVE-2022-34727 | 8.8 | Sep 13 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21666 |
| CVE-2022-34691 | 8.8 | Aug 9 | Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-22026 | 8.8 | Jul 12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21569 |
| CVE-2022-30161 | 8.8 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21507 |
| CVE-2022-30153 | 8.8 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21507 |
| CVE-2022-29141 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-29139 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-29137 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-29129 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-29128 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-22019 | 8.8 | May 10 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-22014 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-22013 | 8.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-24541 | 8.8 | Apr 15 | Windows Server Service Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21446 |
| CVE-2022-24528 | 8.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21446 |
| CVE-2022-24500 | 8.8 | Apr 15 | Windows SMB Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21446 |
| CVE-2022-24492 | 8.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21446 |
| CVE-2022-21990 | 8.8 | Mar 9 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21416 |
| CVE-2022-21922 | 8.8 | Jan 11 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21349 |
| CVE-2022-21920 | 8.8 | Jan 11 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21349 |
| CVE-2022-21857 | 8.8 | Jan 11 | Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21349 |
| CVE-2022-21851 | 8.8 | Jan 11 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21349 |
| CVE-2022-21850 | 8.8 | Jan 11 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21349 |
| CVE-2021-42283 | 8.8 | Nov 10 | NTFS Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21282 |
| CVE-2021-42275 | 8.8 | Nov 10 | Microsoft COM for Windows Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21282 |
| CVE-2021-38666 | 8.8 | Nov 10 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21282 |
| CVE-2025-27737 | 8.6 | Apr 8 | Windows Security Zone Mapping Security Feature Bypass Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23220 |
| CVE-2025-50177 | 8.1 | Aug 12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-32710 | 8.1 | Jun 10 | Windows Remote Desktop Services Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23317 |
| CVE-2025-26670 | 8.1 | Apr 8 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23220 |
| CVE-2025-26663 | 8.1 | Apr 8 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23220 |
| CVE-2025-24064 | 8.1 | Mar 11 | Windows Domain Name Service Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23168 |
| CVE-2025-24035 | 8.1 | Mar 11 | Windows Remote Desktop Services Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23168 |
| CVE-2025-21376 | 8.1 | Feb 11 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23117 |
| CVE-2025-21294 | 8.1 | Jan 14 | Microsoft Digest Authentication Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23070 |
| CVE-2024-49127 | 8.1 | Dec 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23016 |
| CVE-2024-49118 | 8.1 | Dec 10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23016 |
| CVE-2024-49126 | 8.1 | Dec 10 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23016 |
| CVE-2024-49124 | 8.1 | Dec 10 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23016 |
| CVE-2024-49122 | 8.1 | Dec 10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23016 |
| CVE-2024-29995 | 8.1 | Aug 13 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22825 |
| CVE-2024-38049 | 8.1 | Jul 9 | Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22769 |
| CVE-2024-30020 | 8.1 | May 14 | Windows Cryptographic Services Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22668 |
| CVE-2024-21357 | 8.1 | Feb 13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22511 |
| CVE-2023-36005 | 8.1 | Dec 12 | Windows Telephony Server Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22413 |
| CVE-2023-38166 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41774 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41773 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41771 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
The 500 most important CVEs for this product (exploited first, then by severity)