Advisories · Technology
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).
Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 7
- CVSS 8.0 High
Remote Desktop Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CVSS 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.5 High
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 5.5 Medium
Windows Cleanup Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Windows Digital TV Tuner Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
- CVSS 7.8 High
Windows Media Center Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
- CVSS 7.5 High
Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.8 High
NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.5 High
Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CVSS 8.8 High
Microsoft COM for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 MediumCritical · KEVKEV · ransomware
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- CVSS 7.8 High
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 4.4 Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- CVSS 4.4 Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Windows Media Audio Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.2 High
Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CVSS 6.5 Medium
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft MSHTML Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- CVSS 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
- CVSS 5.5 Medium
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 Medium
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 6.5 Medium
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 Medium
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
- CVSS 8.8 High
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 Medium
Windows Installer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 Medium
Windows Installer Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.5 High
Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 5.5 Medium
Windows Authenticode Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.1 High
Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.8 High
Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Windows LSA Spoofing Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CVSS 7.8 High
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 8.8 High
Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
- CVSS 7.8 High
Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 High
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607