# Microsoft Windows Server 2008 Service Pack 2 (Server Core installation). Every CVE that names Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26672.md) `CVE-2025-26672` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26670.md) `CVE-2025-26670` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26647.md) `CVE-2025-26647` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20 - [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26641.md) `CVE-2025-26641` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21222.md) `CVE-2025-21222` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21221.md) `CVE-2025-21221` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Process Activation Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21204.md) `CVE-2025-21204` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Path traversal - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21203.md) `CVE-2025-21203` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21205.md) `CVE-2025-21205` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21191.md) `CVE-2025-21191` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition - [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21197.md) `CVE-2025-21197` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control - [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29824.md) `CVE-2025-29824` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.19 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27742.md) `CVE-2025-27742` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27741.md) `CVE-2025-27741` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Active Directory Certificate Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27740.md) `CVE-2025-27740` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Authentication bypass - [Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27478.md) `CVE-2025-27478` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27477.md) `CVE-2025-27477` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27474.md) `CVE-2025-27474` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27473.md) `CVE-2025-27473` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service - [Microsoft Streaming Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27471.md) `CVE-2025-27471` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26687.md) `CVE-2025-26687` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26686.md) `CVE-2025-26686` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26668.md) `CVE-2025-26668` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26667.md) `CVE-2025-26667` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26669.md) `CVE-2025-26669` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows upnphost.dll Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26665.md) `CVE-2025-26665` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26664.md) `CVE-2025-26664` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26663.md) `CVE-2025-26663` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26645.md) `CVE-2025-26645` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Path traversal, Broken access control - [Microsoft Management Console Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26633.md) `CVE-2025-26633` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.30 · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-707 - [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24993.md) `CVE-2025-24993` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24992.md) `CVE-2025-24992` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-126 - [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24991.md) `CVE-2025-24991` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Fast FAT File System Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24985.md) `CVE-2025-24985` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24983.md) `CVE-2025-24983` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24072.md) `CVE-2025-24072` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24064.md) `CVE-2025-24064` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24059.md) `CVE-2025-24059` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-681 - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24056.md) `CVE-2025-24056` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows USB Video Class System Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24055.md) `CVE-2025-24055` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24051.md) `CVE-2025-24051` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21247.md) `CVE-2025-21247` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-41 - [Windows exFAT File System Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21180.md) `CVE-2025-21180` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows USB Video Class System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24988.md) `CVE-2025-24988` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows USB Video Class System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24987.md) `CVE-2025-24987` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24035.md) `CVE-2025-24035` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-591 - [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21373.md) `CVE-2025-21373` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal - [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21181.md) `CVE-2025-21181` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2025 · Tags: Denial of service - [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21377.md) `CVE-2025-21377` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · EPSS 0.40 · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21371.md) `CVE-2025-21371` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Kernel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21359.md) `CVE-2025-21359` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Broken access control - [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21350.md) `CVE-2025-21350` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-20 - [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21337.md) `CVE-2025-21337` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 11 Feb 2025 · Tags: Broken access control - [Windows Telephony Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21201.md) `CVE-2025-21201` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21200.md) `CVE-2025-21200` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21190.md) `CVE-2025-21190` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21410.md) `CVE-2025-21410` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21407.md) `CVE-2025-21407` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21406.md) `CVE-2025-21406` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21208.md) `CVE-2025-21208` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .