Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1.

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-53766 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

GDI+ Remote Code Execution Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53722 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 12 Aug 2025
CVE-2025-53720 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53719 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53718 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53154 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53153 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53152 CVE record

CVSS 7.8 High

Desktop Windows Manager Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53149 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53148 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53147 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53145 CVE record

CVSS 8.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53144 CVE record

CVSS 8.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53143 CVE record

CVSS 8.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53141 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53140 CVE record

CVSS 7.0 High

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53138 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53137 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53136 CVE record

CVSS 5.5 Medium

NT OS Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 12 Aug 2025
CVE-2025-53134 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-53132 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50177 CVE record

CVSS 8.1 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50173 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Multimedia Redirection Installer
- Microsoft Windows 10 Version 1507
- Authentication bypass
Not analysed yet 12 Aug 2025
CVE-2025-50166 CVE record

CVSS 6.5 Medium

Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50164 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50163 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50162 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50161 CVE record

CVSS 7.3 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50160 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50158 CVE record

CVSS 7.0 High

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-50156 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50154 CVE record

CVSS 6.5 Medium

Microsoft Windows File Explorer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 12 Aug 2025
CVE-2025-50153 CVE record

CVSS 7.8 High

Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49762 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-49761 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49757 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49743 CVE record

CVSS 6.7 Medium

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49742 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49732 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49730 CVE record

CVSS 7.8 High

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-49729 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49727 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49722 CVE record

CVSS 5.7 Medium

Windows Print Spooler Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Jul 2025
CVE-2025-49683 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49681 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49679 CVE record

CVSS 7.8 High

Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Jul 2025
CVE-2025-49678 CVE record

CVSS 7.0 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49675 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49673 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49668 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49667 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49664 CVE record

CVSS 5.5 Medium

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-49663 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49659 CVE record

CVSS 7.8 High

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-48821 CVE record

CVSS 7.1 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48819 CVE record

CVSS 7.1 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Jul 2025
CVE-2025-48817 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Path traversal
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-48816 CVE record

CVSS 7.8 High

HID Class Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48815 CVE record

CVSS 7.8 High

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025