WS
Product
Windows Server 2008 Service Pack 2
On CISA KEVExploited in the wildRansomware-linked
1,261
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 43High 449Medium 8Low 0
Watch
Add Windows Server 2008 Service Pack 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41769 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41768 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41767 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-41765 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22317 |
| CVE-2023-35297 | 8.1 | Jul 11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22175 |
| CVE-2023-29351 | 8.1 | Jun 13 | Windows Group Policy Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22113 |
| CVE-2022-35753 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2023-24903 | 8.1 | May 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22070 |
| CVE-2023-28283 | 8.1 | May 9 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22070 |
| CVE-2023-28268 | 8.1 | Apr 11 | Netlogon RPC Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28244 | 8.1 | Apr 11 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28220 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-28219 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22015 |
| CVE-2023-24869 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-24908 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-23405 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21966 |
| CVE-2023-21679 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21556 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21555 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21548 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21546 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2023-21535 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21872 |
| CVE-2022-41044 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21768 |
| CVE-2022-38023 | 8.1 | Nov 9 | Netlogon RPC Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.22175 |
| CVE-2022-37966 | 8.1 | Nov 9 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-41081 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-38047 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-33634 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-24504 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21721 |
| CVE-2022-35830 | 8.1 | Sep 13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21666 |
| CVE-2022-33679 | 8.1 | Sep 13 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21666 |
| CVE-2022-33647 | 8.1 | Sep 13 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21666 |
| CVE-2022-35767 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-34714 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-34702 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21616 |
| CVE-2022-22029 | 8.1 | Jul 12 | Windows Network File System Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21569 |
| CVE-2022-30141 | 8.1 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21507 |
| CVE-2022-23270 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-21972 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21481 |
| CVE-2022-26919 | 8.1 | Apr 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.21446 |
| CVE-2026-20931 | 8.0 | Jan 13 | Windows Telephony Service Elevation of Privilege Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23717 |
| CVE-2025-60715 | 8.0 | Nov 11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23624 |
| CVE-2025-62452 | 8.0 | Nov 11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23624 |
| CVE-2025-53720 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50164 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50162 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
| CVE-2025-50160 | 8.0 | Aug 12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.0.6003.0 before 6.0.6003.23471 |
The 500 most important CVEs for this product (exploited first, then by severity)