microsoft / windows_server_2008
326 known vulnerabilities in microsoft windows_server_2008.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-20925 | Medium | 18.2% | 6.5 | External control of file name or path in Windows NTLM allows an unauthorized att… | |
| CVE-2021-26877 | Medium | 16.5% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2020-1048 | Medium | 16.4% | 7.8 | An elevation of privilege vulnerability exists when the Windows Print Spooler se… | |
| CVE-2021-38666 | Medium | 15.1% | 8.8 | Remote Desktop Client Remote Code Execution Vulnerability | |
| CVE-2021-26897 | Medium | 11.6% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2023-36900 | Medium | 10.6% | 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2023-35359 | Medium | 9.9% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2026-20860 | Medium | 8.4% | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Ancilla… | |
| CVE-2022-41109 | Medium | 8.1% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-36947 | Medium | 7.5% | 8.8 | Windows Print Spooler Remote Code Execution Vulnerability | |
| CVE-2021-36936 | Medium | 7.4% | 8.8 | Windows Print Spooler Remote Code Execution Vulnerability | |
| CVE-2021-26896 | Medium | 7.4% | 7.5 | Windows DNS Server Denial of Service Vulnerability | |
| CVE-2021-26894 | Medium | 7.3% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-26895 | Medium | 7.3% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-26893 | Medium | 7.0% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-38665 | Medium | 7.0% | 7.4 | Remote Desktop Protocol Client Information Disclosure Vulnerability | |
| CVE-2021-27063 | Medium | 6.3% | 7.5 | Windows DNS Server Denial of Service Vulnerability | |
| CVE-2020-1108 | Medium | 6.3% | 7.5 | A denial of service vulnerability exists when .NET Core or .NET Framework improp… | |
| CVE-2020-1062 | Medium | 6.2% | 7.5 | A remote code execution vulnerability exists when Internet Explorer improperly a… | |
| CVE-2021-26435 | Medium | 5.3% | 8.1 | Windows Scripting Engine Memory Corruption Vulnerability | |
| CVE-2026-20840 | Medium | 4.7% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2021-36965 | Medium | 4.6% | 8.8 | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | |
| CVE-2020-0909 | Medium | 4.6% | 7.5 | A denial of service vulnerability exists when Hyper-V on a Windows Server fails … | |
| CVE-2021-42282 | Medium | 4.2% | 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2021-42291 | Medium | 4.2% | 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2022-37967 | Medium | 4.1% | 7.2 | Windows Kerberos Elevation of Privilege Vulnerability | |
| CVE-2021-34494 | Medium | 4.0% | 8.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2020-1153 | Medium | 3.8% | 7.8 | A remote code execution vulnerability exists in the way that Microsoft Graphics … | |
| CVE-2021-31183 | Medium | 3.8% | 7.5 | Windows TCP/IP Driver Denial of Service Vulnerability | |
| CVE-2020-1051 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1174 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1175 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1176 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2023-21688 | Medium | 3.6% | 7.8 | NT OS Kernel Elevation of Privilege Vulnerability | |
| CVE-2023-35380 | Medium | 3.5% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2026-20843 | Medium | 3.5% | 7.8 | Improper access control in Windows Routing and Remote Access Service (RRAS) allo… | |
| CVE-2021-36932 | Medium | 3.5% | 7.5 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | |
| CVE-2021-34504 | Medium | 3.4% | 7.8 | Windows Address Book Remote Code Execution Vulnerability | |
| CVE-2023-21812 | Medium | 3.3% | 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2020-1061 | Medium | 3.3% | 7.5 | A remote code execution vulnerability exists in the way that the Microsoft Scrip… | |
| CVE-2020-1112 | Medium | 3.3% | 8.5 | An elevation of privilege vulnerability exists when the Windows Background Intel… | |
| CVE-2021-36960 | Medium | 3.3% | 7.5 | Windows SMB Information Disclosure Vulnerability | |
| CVE-2021-33788 | Medium | 3.3% | 7.5 | Windows LSA Denial of Service Vulnerability | |
| CVE-2021-34476 | Medium | 3.3% | 7.5 | Bowser.sys Denial of Service Vulnerability | |
| CVE-2020-1150 | Medium | 3.2% | 7.8 | A memory corruption vulnerability exists when Windows Media Foundation improperl… | |
| CVE-2021-34442 | Medium | 3.1% | 8.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2020-1035 | Medium | 3.1% | 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine… | |
| CVE-2020-1064 | Medium | 3.1% | 7.5 | A remote code execution vulnerability exists in the way that the MSHTML engine i… | |
| CVE-2020-1093 | Medium | 3.1% | 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine… | |
| CVE-2020-1058 | Medium | 3.1% | 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine… |