Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-49112 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49090 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49088 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 10 Dec 2024
CVE-2024-49082 CVE record

CVSS 6.8 Medium

Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Dec 2024
CVE-2024-49080 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49072 CVE record

CVSS 7.8 High

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49126 CVE record

CVSS 8.1 High

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49125 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49124 CVE record

CVSS 8.1 High

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 10 Dec 2024
CVE-2024-49122 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49121 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49104 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49102 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49096 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49089 CVE record

CVSS 7.2 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49086 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49085 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49084 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 10 Dec 2024
CVE-2024-49019 CVE record

CVSS 7.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-43635 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43622 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43620 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43450 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-924
Not analysed yet 12 Nov 2024
CVE-2024-43449 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43638 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43637 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43634 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43628 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43627 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43626 CVE record

CVSS 7.8 High

Windows Telephony Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43623 CVE record

CVSS 7.8 High

Windows NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43611 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43583 CVE record

CVSS 7.8 High

Winlogon Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 8 Oct 2024
CVE-2024-43599 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43593 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43592 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43589 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43572 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Management Console Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-707
Not analysed yet 8 Oct 2024
CVE-2024-43570 CVE record

CVSS 6.4 Medium

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43564 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43556 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43553 CVE record

CVSS 7.4 High

NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43549 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43547 CVE record

CVSS 6.5 Medium

Windows Kerberos Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-325
Not analysed yet 8 Oct 2024
CVE-2024-43545 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43544 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43520 CVE record

CVSS 5.0 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43517 CVE record

CVSS 8.8 High

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43509 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43501 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43456 CVE record

CVSS 4.8 Medium

Windows Remote Desktop Services Tampering Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2024-38212 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43453 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-38262 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-38265 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-38124 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Netlogon Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2024-38149 CVE record

CVSS 7.5 High

BranchCache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43607 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43608 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43541 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024