Advisories · Technology

Microsoft Windows Server 2008 Service Pack 2.

Every CVE that names Microsoft Windows Server 2008 Service Pack 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21563 CVE record

CVSS 6.8 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21561 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21560 CVE record

CVSS 6.6 Medium

Windows Boot Manager Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21557 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21556 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21555 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 10 Jan 2023
CVE-2023-21552 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21548 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21546 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21543 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Jan 2023
CVE-2023-21542 CVE record

CVSS 7.0 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Jan 2023
CVE-2023-21541 CVE record

CVSS 7.8 High

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21537 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 10 Jan 2023
CVE-2023-21535 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21532 CVE record

CVSS 7.0 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21527 CVE record

CVSS 7.5 High

Windows iSCSI Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21525 CVE record

CVSS 5.3 Medium

Remote Procedure Call Runtime Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2022-44697 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44681 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44678 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44676 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44673 CVE record

CVSS 7.0 High

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H1
Not analysed yet 13 Dec 2022
CVE-2022-44670 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44666 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Contacts Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41121 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41094 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41077 CVE record

CVSS 7.8 High

Windows Fax Compose Form Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41076 CVE record

CVSS 8.5 HighCritical · CVSS 7+ and EPSS

PowerShell Remote Code Execution Vulnerability
- Microsoft PowerShell 7.2
- Microsoft PowerShell 7.3
Not analysed yet 13 Dec 2022
CVE-2022-41074 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41109 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41098 CVE record

CVSS 5.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41097 CVE record

CVSS 6.5 Medium

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41095 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41086 CVE record

CVSS 6.4 Medium

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41073 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-41058 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41057 CVE record

CVSS 7.8 High

Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41056 CVE record

CVSS 7.5 High

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41053 CVE record

CVSS 7.5 High

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41048 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41047 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41045 CVE record

CVSS 7.8 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41044 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-38023 CVE record

CVSS 8.1 High

Netlogon RPC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-37992 CVE record

CVSS 7.8 High

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-37967 CVE record

CVSS 7.2 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-37966 CVE record

CVSS 8.1 High

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-41081 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-41033 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows COM+ Event System Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Oct 2022
CVE-2022-38051 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38047 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38044 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows CD-ROM File System Driver Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 10 Version 20H2
Not analysed yet 11 Oct 2022
CVE-2022-38042 CVE record

CVSS 7.1 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38040 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38038 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38037 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38034 CVE record

CVSS 8.8 High

Windows Workstation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38033 CVE record

CVSS 6.5 Medium

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38032 CVE record

CVSS 6.6 Medium

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38031 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022