Filtered by vendor Microsoft Subscriptions
Filtered by product Windows Server 2008 Subscriptions
Total 3398 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-35381 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-06-04 8.8 High
Windows Fax Service Remote Code Execution Vulnerability
CVE-2023-35319 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-06-04 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-35310 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2024-06-04 6.6 Medium
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-35366 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-06-04 9.8 Critical
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2022-22036 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.0 High
Performance Counters for Windows Elevation of Privilege Vulnerability
CVE-2022-22039 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2024-06-04 7.5 High
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-41057 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2024-06-04 7.8 High
Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2022-41086 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2024-06-04 6.4 Medium
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-34721 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 9.8 Critical
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-30226 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.1 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-30220 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-43883 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.8 High
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-41331 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 7.8 High
Windows Media Audio Decoder Remote Code Execution Vulnerability
CVE-2021-31954 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40443 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40466 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-04 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2019-1057 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 7.5 High
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could host a specially crafted website designed to invoke MSXML through a web browser. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or instant message that would then take the user to the website. When Internet Explorer parses the XML content, an attacker could run malicious code remotely to take control of the user’s system. The update addresses the vulnerability by correcting how the MSXML parser processes user input.
CVE-2019-1158 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 5.5 Medium
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
CVE-2019-1162 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 7.8 High
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system. The update addresses the vulnerability by correcting how Windows handles calls to ALPC.
CVE-2019-1159 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-04 7.8 High
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.