Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43535 CVE record

CVSS 7.0 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43534 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43532 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Registry Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-636
Not analysed yet 8 Oct 2024
CVE-2024-43519 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Oct 2024
CVE-2024-43518 CVE record

CVSS 8.8 High

Windows Telephony Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43515 CVE record

CVSS 7.5 High

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43506 CVE record

CVSS 7.5 High

BranchCache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-38261 CVE record

CVSS 7.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-30073 CVE record

CVSS 7.8 High

Windows Security Zone Mapping Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 10 Sept 2024
CVE-2024-43461 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-451
Not analysed yet 10 Sept 2024
CVE-2024-43455 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Spoofing Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43454 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38263 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 10 Sept 2024
CVE-2024-38260 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38258 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38247 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38245 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38239 CVE record

CVSS 7.2 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 10 Sept 2024
CVE-2024-38234 CVE record

CVSS 6.5 Medium

Windows Networking Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38231 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-38217 CVE record

CVSS 5.4 MediumCritical · KEVKEV

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 10 Sept 2024
CVE-2024-38014 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-43467 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Race condition
Not analysed yet 10 Sept 2024
CVE-2024-38256 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38250 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- CWE-126
Not analysed yet 10 Sept 2024
CVE-2024-38249 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38236 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2024-37968 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38214 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38120 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38180 CVE record

CVSS 8.8 High

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 13 Aug 2024
CVE-2024-38154 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38153 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38152 CVE record

CVSS 7.8 High

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38151 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38144 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38140 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38138 CVE record

CVSS 7.5 High

Windows Deployment Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38134 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38130 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38128 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38127 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 13 Aug 2024
CVE-2024-38125 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 13 Aug 2024
CVE-2024-38122 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38121 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38118 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38117 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38116 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38115 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38114 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-29995 CVE record

CVSS 8.1 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-208
Not analysed yet 13 Aug 2024
CVE-2024-38063 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38199 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38198 CVE record

CVSS 7.5 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38196 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- CWE-20
Not analysed yet 13 Aug 2024
CVE-2024-38193 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38191 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38099 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 9 Jul 2024
CVE-2024-38079 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38074 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024