Advisories · Technology

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-26672 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26670 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26647 CVE record

CVSS 8.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-26641 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-21222 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21221 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21204 CVE record

CVSS 7.8 High

Windows Process Activation Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Apr 2025
CVE-2025-21203 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-21205 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-21191 CVE record

CVSS 7.0 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Apr 2025
CVE-2025-21197 CVE record

CVSS 6.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 8 Apr 2025
CVE-2025-29824 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27742 CVE record

CVSS 5.5 Medium

NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27741 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27740 CVE record

CVSS 8.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Authentication bypass
Not analysed yet 8 Apr 2025
CVE-2025-27478 CVE record

CVSS 7.0 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27477 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27474 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27473 CVE record

CVSS 7.5 High

HTTP.sys Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-27471 CVE record

CVSS 5.9 Medium

Microsoft Streaming Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26687 CVE record

CVSS 7.5 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26686 CVE record

CVSS 7.5 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26668 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26667 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Information disclosure
Not analysed yet 8 Apr 2025
CVE-2025-26669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26665 CVE record

CVSS 7.0 High

Windows upnphost.dll Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26664 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26663 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26645 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Path traversal
- Broken access control
Not analysed yet 11 Mar 2025
CVE-2025-26633 CVE record

CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Management Console Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-707
Not analysed yet 11 Mar 2025
CVE-2025-24993 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24992 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 11 Mar 2025
CVE-2025-24991 CVE record

CVSS 5.5 MediumCritical · KEVKEV

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24985 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Fast FAT File System Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24983 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24072 CVE record

CVSS 7.8 High

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24064 CVE record

CVSS 8.1 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24059 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-681
Not analysed yet 11 Mar 2025
CVE-2025-24056 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24055 CVE record

CVSS 4.3 Medium

Windows USB Video Class System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24051 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-21247 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 11 Mar 2025
CVE-2025-21180 CVE record

CVSS 7.8 High

Windows exFAT File System Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24988 CVE record

CVSS 6.6 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24987 CVE record

CVSS 6.6 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24035 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 11 Mar 2025
CVE-2025-21373 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21181 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 11 Feb 2025
CVE-2025-21377 CVE record

CVSS 6.5 Medium

NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21371 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21359 CVE record

CVSS 7.8 High

Windows Kernel Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 11 Feb 2025
CVE-2025-21350 CVE record

CVSS 5.9 Medium

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 11 Feb 2025
CVE-2025-21337 CVE record

CVSS 3.3 Low

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 11 Feb 2025
CVE-2025-21201 CVE record

CVSS 8.8 High

Windows Telephony Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21200 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21190 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21410 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21407 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21406 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21208 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025