Microsoft Windows Server 2008
By the Year
In 2024 there have been 143 vulnerabilities in Microsoft Windows Server 2008 with an average score of 7.6 out of ten. Last year Windows Server 2008 had 363 security vulnerabilities published. Right now, Windows Server 2008 is on track to have less security vulnerabilities in 2024 than it did last year. However, the average CVE base score of the vulnerabilities in 2024 is greater by 0.10.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 143 | 7.65 |
| 2023 | 363 | 7.55 |
| 2022 | 334 | 7.56 |
| 2021 | 279 | 7.62 |
| 2020 | 382 | 7.42 |
| 2019 | 314 | 7.27 |
| 2018 | 158 | 6.48 |
It may take a day or so for new Windows Server 2008 vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Windows Server 2008 Security Vulnerabilities
Windows Security Zone Mapping Security Feature Bypass Vulnerability
CVE-2024-30073
7.8 - High
- September 10, 2024
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Improper Resolution of Path Equivalence
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVE-2024-38231
7.5 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
AuthZ
Windows Networking Denial of Service Vulnerability
CVE-2024-38234
6.5 - Medium
- September 10, 2024
Windows Networking Denial of Service Vulnerability
Improper Input Validation
DHCP Server Service Denial of Service Vulnerability
CVE-2024-38236
7.5 - High
- September 10, 2024
DHCP Server Service Denial of Service Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2024-38239
7.2 - High
- September 10, 2024
Windows Kerberos Elevation of Privilege Vulnerability
1390
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVE-2024-38245
7.8 - High
- September 10, 2024
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38247
7.8 - High
- September 10, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Double-free
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38249
7.8 - High
- September 10, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Dangling pointer
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38250
7.8 - High
- September 10, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Buffer Over-read
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-43467
7.5 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Race Condition
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43461
8.8 - High
- September 10, 2024
Windows MSHTML Platform Spoofing Vulnerability
User Interface (UI) Misrepresentation of Critical Information
Windows Kernel-Mode Driver Information Disclosure Vulnerability
CVE-2024-38256
5.5 - Medium
- September 10, 2024
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Use of Uninitialized Resource
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
CVE-2024-38258
7.5 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Relative Path Traversal
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38260
8.8 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Use of Uninitialized Resource
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38263
7.5 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Sensitive Data Storage in Improperly Locked Memory
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-43454
7.1 - High
- September 10, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Relative Path Traversal
Windows Remote Desktop Licensing Service Spoofing Vulnerability
CVE-2024-43455
9.8 - Critical
- September 10, 2024
Windows Remote Desktop Licensing Service Spoofing Vulnerability
Microsoft Windows Admin Center Information Disclosure Vulnerability
CVE-2024-43475
7.3 - High
- September 10, 2024
Microsoft Windows Admin Center Information Disclosure Vulnerability
Buffer Over-read
Windows Installer Elevation of Privilege Vulnerability
CVE-2024-38014
7.8 - High
- September 10, 2024
Windows Installer Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38217
5.4 - Medium
- September 10, 2024
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection Mechanism Failure
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2024-29995
8.1 - High
- August 13, 2024
Windows Kerberos Elevation of Privilege Vulnerability
Observable Timing Discrepancy
Windows DNS Spoofing Vulnerability
CVE-2024-37968
7.5 - High
- August 13, 2024
Windows DNS Spoofing Vulnerability
Insufficient Verification of Data Authenticity
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2024-38063
9.8 - Critical
- August 13, 2024
Windows TCP/IP Remote Code Execution Vulnerability
Integer underflow
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38114
8.8 - High
- August 13, 2024
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-38140
9.8 - Critical
- August 13, 2024
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Dangling pointer
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38144
8.8 - High
- August 13, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Integer Overflow or Wraparound
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38154
8.8 - High
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2024-38180
8.8 - High
- August 13, 2024
Windows SmartScreen Security Feature Bypass Vulnerability
Protection Mechanism Failure
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38115
8.8 - High
- August 13, 2024
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38116
8.8 - High
- August 13, 2024
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
NTFS Elevation of Privilege Vulnerability
CVE-2024-38117
7.8 - High
- August 13, 2024
NTFS Elevation of Privilege Vulnerability
Out-of-bounds Read
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2024-38118
5.5 - Medium
- August 13, 2024
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Use of Uninitialized Resource
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38120
8.8 - High
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38121
8.8 - High
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2024-38122
5.5 - Medium
- August 13, 2024
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Use of Uninitialized Resource
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38125
7.8 - High
- August 13, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Numeric Truncation Error
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-38127
7.8 - High
- August 13, 2024
Windows Hyper-V Elevation of Privilege Vulnerability
Buffer Over-read
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38128
8.8 - High
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38130
8.8 - High
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
CVE-2024-38131
8.8 - High
- August 13, 2024
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
Sensitive Data Storage in Improperly Locked Memory
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVE-2024-38191
7.8 - High
- August 13, 2024
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Race Condition
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-38196
7.8 - High
- August 13, 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Improper Input Validation
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-38198
7.5 - High
- August 13, 2024
Windows Print Spooler Elevation of Privilege Vulnerability
Insufficient Verification of Data Authenticity
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2024-38199
9.8 - Critical
- August 13, 2024
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Dangling pointer
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVE-2024-38214
6.5 - Medium
- August 13, 2024
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds Read
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
CVE-2024-38223
6.8 - Medium
- August 13, 2024
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
Authorization
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38134
7.8 - High
- August 13, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Out-of-bounds Read
Windows Kernel Information Disclosure Vulnerability
CVE-2024-38151
5.5 - Medium
- August 13, 2024
Windows Kernel Information Disclosure Vulnerability
Out-of-bounds Read
Windows OLE Remote Code Execution Vulnerability
CVE-2024-38152
7.8 - High
- August 13, 2024
Windows OLE Remote Code Execution Vulnerability
Heap-based Buffer Overflow
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38153
7.8 - High
- August 13, 2024
Windows Kernel Elevation of Privilege Vulnerability
TOCTTOU
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38193
7.8 - High
- August 13, 2024
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Dangling pointer
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVE-2024-38071
7.5 - High
- July 09, 2024
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38112
7.5 - High
- July 09, 2024
Windows MSHTML Platform Spoofing Vulnerability
User Interface (UI) Misrepresentation of Critical Information
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-38068
7.5 - High
- July 09, 2024
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-38067
7.5 - High
- July 09, 2024
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
CVE-2024-38066
7.8 - High
- July 09, 2024
Windows Win32k Elevation of Privilege Vulnerability
Dangling pointer
Windows NTLM Spoofing Vulnerability
CVE-2024-30081
7.1 - High
- July 09, 2024
Windows NTLM Spoofing Vulnerability
Windows iSCSI Service Denial of Service Vulnerability
CVE-2024-35270
5.3 - Medium
- July 09, 2024
Windows iSCSI Service Denial of Service Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-38064
7.5 - High
- July 09, 2024
Windows TCP/IP Information Disclosure Vulnerability
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
CVE-2024-38061
7.5 - High
- July 09, 2024
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
Windows Imaging Component Remote Code Execution Vulnerability
CVE-2024-38060
8.8 - High
- July 09, 2024
Windows Imaging Component Remote Code Execution Vulnerability
Memory Corruption
Windows Filtering Platform Elevation of Privilege Vulnerability
CVE-2024-38034
7.8 - High
- July 09, 2024
Windows Filtering Platform Elevation of Privilege Vulnerability
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-38031
7.5 - High
- July 09, 2024
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVE-2024-38073
7.5 - High
- July 09, 2024
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38074
9.8 - Critical
- July 09, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38077
9.8 - Critical
- July 09, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38079
7.8 - High
- July 09, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38085
7.8 - High
- July 09, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft WS-Discovery Denial of Service Vulnerability
CVE-2024-38091
7.5 - High
- July 09, 2024
Microsoft WS-Discovery Denial of Service Vulnerability
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
CVE-2024-38048
6.5 - Medium
- July 09, 2024
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Out-of-bounds Read
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVE-2024-38049
8.1 - High
- July 09, 2024
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Externally Controlled Reference to a Resource in Another Sphere
Windows Workstation Service Elevation of Privilege Vulnerability
CVE-2024-38050
7.8 - High
- July 09, 2024
Windows Workstation Service Elevation of Privilege Vulnerability
Integer underflow
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2024-38051
7.8 - High
- July 09, 2024
Windows Graphics Component Remote Code Execution Vulnerability
Memory Corruption
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38052
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38054
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Memory Corruption
Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVE-2024-38055
5.5 - Medium
- July 09, 2024
Microsoft Windows Codecs Library Information Disclosure Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38057
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVE-2024-38099
5.9 - Medium
- July 09, 2024
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
CVE-2024-38104
8.8 - High
- July 09, 2024
Windows Fax Service Remote Code Execution Vulnerability
Buffer Overflow
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-38017
5.5 - Medium
- July 09, 2024
Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38019
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Integer Overflow or Wraparound
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38025
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Memory Corruption
Windows Line Printer Daemon Service Denial of Service Vulnerability
CVE-2024-38027
6.5 - Medium
- July 09, 2024
Windows Line Printer Daemon Service Denial of Service Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38028
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Out-of-bounds Read
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-35250
7.8 - High
- June 11, 2024
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Buffer Overflow
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2024-30075
8 - High
- June 11, 2024
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
CVE-2024-30077
8 - High
- June 11, 2024
Windows OLE Remote Code Execution Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
CVE-2024-30078
8.8 - High
- June 11, 2024
Windows Wi-Fi Driver Remote Code Execution Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30084
7 - High
- June 11, 2024
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
TOCTTOU
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2024-30074
8 - High
- June 11, 2024
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2024-30063
6.7 - Medium
- June 11, 2024
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-30080
9.8 - Critical
- June 11, 2024
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Dangling pointer
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30095
7.8 - High
- June 11, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Memory Corruption
Windows Storage Elevation of Privilege Vulnerability
CVE-2024-30093
7.3 - High
- June 11, 2024
Windows Storage Elevation of Privilege Vulnerability
insecure temporary file
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30094
7.8 - High
- June 11, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2024-30082
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2024-30087
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2024-30091
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-30090
7 - High
- June 11, 2024
Microsoft Streaming Service Elevation of Privilege Vulnerability
Buffer Overflow
Win32k Elevation of Privilege Vulnerability
CVE-2024-30030
7.8 - High
- May 14, 2024
Win32k Elevation of Privilege Vulnerability
NULL Pointer Dereference
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows Server 2008 or by Microsoft? Click the Watch button to subscribe.
