WS
Product
Windows Server 2008 Service Pack 2
On CISA KEVExploited in the wildRansomware-linked
1,048
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 36High 456Medium 8Low 0
Watch
Add Windows Server 2008 Service Pack 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21357 | 8.1 | Feb 13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22511 |
| CVE-2023-36005 | 8.1 | Dec 12 | Windows Telephony Server Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22413 |
| CVE-2023-38166 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41774 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41773 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41771 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41770 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41769 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41768 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41767 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41765 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-35297 | 8.1 | Jul 11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22175 |
| CVE-2023-29351 | 8.1 | Jun 13 | Windows Group Policy Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22113 |
| CVE-2022-35753 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2023-24903 | 8.1 | May 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22070 |
| CVE-2023-28283 | 8.1 | May 9 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22070 |
| CVE-2023-28268 | 8.1 | Apr 11 | Netlogon RPC Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28244 | 8.1 | Apr 11 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28220 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28219 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-24869 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-24908 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-23405 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-21556 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21548 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21546 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21535 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21555 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21679 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2022-41081 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-38047 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-33634 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-24504 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-35767 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-34714 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-34702 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2026-20931 | 8.0 | Jan 13 | Windows Telephony Service Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23717 |
| CVE-2025-60715 | 8.0 | Nov 11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23624 |
| CVE-2025-62452 | 8.0 | Nov 11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23624 |
| CVE-2025-53720 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50164 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50162 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50160 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2024-30077 | 8.0 | Jun 11 | Windows OLE Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22720 |
| CVE-2024-30075 | 8.0 | Jun 11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22720 |
| CVE-2024-30074 | 8.0 | Jun 11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22720 |
| CVE-2024-28925 | 8.0 | Apr 9 | Secure Boot Security Feature Bypass Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22618 |
The 500 most important CVEs for this product (exploited first, then by severity)