Advisories · Technology

Microsoft Windows Server 2008 Service Pack 2.

Every CVE that names Microsoft Windows Server 2008 Service Pack 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-24932 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows Server 2025 (Server Core installation)
- Microsoft Windows 11 Version 24H2
- Broken access control
Not analysed yet 9 May 2023
CVE-2023-29336 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-29324 CVE record

CVSS 6.5 Medium

Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 May 2023
CVE-2023-24945 CVE record

CVSS 5.5 Medium

Windows iSCSI Target Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24943 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24903 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24942 CVE record

CVSS 7.5 High

Remote Procedure Call Runtime Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 May 2023
CVE-2023-24940 CVE record

CVSS 7.5 High

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24900 CVE record

CVSS 5.9 Medium

Windows NTLM Security Support Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-28283 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 9 May 2023
CVE-2023-28308 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28307 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28306 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28302 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2023-28293 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28256 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28278 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28255 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28254 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28276 CVE record

CVSS 4.4 Medium

Windows Group Policy Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28253 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28275 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28252 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28250 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28272 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28271 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 11 Apr 2023
CVE-2023-28268 CVE record

CVSS 8.1 High

Netlogon RPC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Apr 2023
CVE-2023-28244 CVE record

CVSS 8.1 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28266 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-28241 CVE record

CVSS 7.5 High

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28240 CVE record

CVSS 8.8 High

Windows Network Load Balancing Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28232 CVE record

CVSS 7.5 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 11 Apr 2023
CVE-2023-28231 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28229 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28228 CVE record

CVSS 5.5 Medium

Windows Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28227 CVE record

CVSS 7.5 High

Windows Bluetooth Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28223 CVE record

CVSS 6.6 Medium

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28220 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28219 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-24912 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21554 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2023-28305 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28298 CVE record

CVSS 5.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28222 CVE record

CVSS 7.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Apr 2023
CVE-2023-28218 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28217 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 11 Apr 2023
CVE-2023-28216 CVE record

CVSS 7.0 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-21769 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21729 CVE record

CVSS 4.3 Medium

Remote Procedure Call Runtime Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21727 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24910 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24869 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24908 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24862 CVE record

CVSS 5.5 Medium

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24861 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 14 Mar 2023
CVE-2023-23423 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Mar 2023
CVE-2023-23422 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Mar 2023
CVE-2023-23421 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23420 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23415 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023