Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-29836 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29835 CVE record

CVSS 6.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29832 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29831 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29830 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-32709 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-32706 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 13 May 2025
CVE-2025-32701 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29969 CVE record

CVSS 7.5 High

MS-EVEN RPC Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 May 2025
CVE-2025-29968 CVE record

CVSS 6.5 Medium

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-20
Not analysed yet 13 May 2025
CVE-2025-29967 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29966 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29960 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29959 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29810 CVE record

CVSS 7.5 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 8 Apr 2025
CVE-2025-27737 CVE record

CVSS 8.6 High

Windows Security Zone Mapping Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-27733 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27732 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27727 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Apr 2025
CVE-2025-27487 CVE record

CVSS 8.0 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27481 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27484 CVE record

CVSS 7.5 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27469 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-26679 CVE record

CVSS 7.8 High

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26676 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26673 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-26672 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26671 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26670 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26647 CVE record

CVSS 8.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-26648 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26641 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-21222 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21221 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21204 CVE record

CVSS 7.8 High

Windows Process Activation Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Apr 2025
CVE-2025-21203 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-21205 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21191 CVE record

CVSS 7.0 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Apr 2025
CVE-2025-21197 CVE record

CVSS 6.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 8 Apr 2025
CVE-2025-29824 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27742 CVE record

CVSS 5.5 Medium

NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27741 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27740 CVE record

CVSS 8.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Authentication bypass
Not analysed yet 8 Apr 2025
CVE-2025-27478 CVE record

CVSS 7.0 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27477 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27474 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27473 CVE record

CVSS 7.5 High

HTTP.sys Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-27471 CVE record

CVSS 5.9 Medium

Microsoft Streaming Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26687 CVE record

CVSS 7.5 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26686 CVE record

CVSS 7.5 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26668 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26667 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Information disclosure
Not analysed yet 8 Apr 2025
CVE-2025-26669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26665 CVE record

CVSS 7.0 High

Windows upnphost.dll Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26664 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26663 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26645 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Path traversal
- Broken access control
Not analysed yet 11 Mar 2025
CVE-2025-26633 CVE record

CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Management Console Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-707
Not analysed yet 11 Mar 2025
CVE-2025-24993 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24992 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 11 Mar 2025