Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1.

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-21835 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21834 CVE record

CVSS 7.0 High

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21833 CVE record

CVSS 7.8 High

Virtual Machine IDE Drive Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43245 CVE record

CVSS 7.8 High

Windows Digital TV Tuner Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-43233 CVE record

CVSS 7.5 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43215 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-40441 CVE record

CVSS 7.8 High

Windows Media Center Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-42291 CVE record

CVSS 7.5 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42287 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42285 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42283 CVE record

CVSS 8.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42282 CVE record

CVSS 7.5 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42278 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42275 CVE record

CVSS 8.8 High

Microsoft COM for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41379 CVE record

CVSS 5.5 MediumCritical · KEVKEV · ransomware

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Nov 2021
CVE-2021-41377 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41371 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41370 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41367 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-38666 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38665 CVE record

CVSS 7.4 High

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38631 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41342 CVE record

CVSS 6.8 Medium

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 13 Oct 2021
CVE-2021-41335 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41331 CVE record

CVSS 7.8 High

Windows Media Audio Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40469 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Oct 2021
CVE-2021-40460 CVE record

CVSS 6.5 Medium

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40447 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-40444 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft MSHTML Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 15 Sept 2021
CVE-2021-38671 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38667 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38639 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38638 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 15 Sept 2021
CVE-2021-38636 CVE record

CVSS 5.5 Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38635 CVE record

CVSS 5.5 Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38633 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38630 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38629 CVE record

CVSS 6.5 Medium

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38628 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36969 CVE record

CVSS 5.5 Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36968 CVE record

CVSS 7.8 High

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 15 Sept 2021
CVE-2021-36965 CVE record

CVSS 8.8 High

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36964 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36963 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36962 CVE record

CVSS 5.5 Medium

Windows Installer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36961 CVE record

CVSS 5.5 Medium

Windows Installer Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36960 CVE record

CVSS 7.5 High

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36959 CVE record

CVSS 5.5 Medium

Windows Authenticode Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36955 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-26435 CVE record

CVSS 8.1 High

Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36958 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36947 CVE record

CVSS 8.8 High

Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36942 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows LSA Spoofing Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 12 Aug 2021
CVE-2021-36937 CVE record

CVSS 7.8 High

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36936 CVE record

CVSS 8.8 High

Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36927 CVE record

CVSS 7.8 High

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 12 Aug 2021
CVE-2021-34537 CVE record

CVSS 7.8 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34535 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 12 Aug 2021
CVE-2021-34533 CVE record

CVSS 7.8 High

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34484 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021