Windows Server 2008 R2 (Microsoft) - vulnerabilities (CVEs)

1900 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-01-13. Vendor: Microsoft.

CVEs of Windows Server 2008 R2

CVE-2026-20940 - CVSS 7.8 (high), 2026-01-13: Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20936 - CVSS 4.3 (medium), 2026-01-13: Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
CVE-2026-20931 - CVSS 8 (high), 2026-01-13: External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-20927 - CVSS 5.3 (medium), 2026-01-13: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny…
CVE-2026-20925 - CVSS 6.5 (medium), 2026-01-13: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-20929 - CVSS 7.5 (high), 2026-01-13: Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-20922 - CVSS 7.8 (high), 2026-01-13: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-20921 - CVSS 7.5 (high), 2026-01-13: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate…
CVE-2026-20875 - CVSS 7.5 (high), 2026-01-13: Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-20868 - CVSS 8.8 (high), 2026-01-13: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2026-20872 - CVSS 6.5 (medium), 2026-01-13: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-20869 - CVSS 7 (high), 2026-01-13: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized…
CVE-2026-20860 - CVSS 7.8 (high), 2026-01-13: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…
CVE-2026-20847 - CVSS 6.5 (medium), 2026-01-13: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.
CVE-2026-20849 - CVSS 7.5 (high), 2026-01-13: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
CVE-2026-20839 - CVSS 5.5 (medium), 2026-01-13: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
CVE-2026-20843 - CVSS 7.8 (high), 2026-01-13: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-20840 - CVSS 7.8 (high), 2026-01-13: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-20834 - CVSS 4.6 (medium), 2026-01-13: Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
CVE-2026-20833 - CVSS 5.5 (medium), 2026-01-13: Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.
CVE-2026-20831 - CVSS 7.8 (high), 2026-01-13: Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-20828 - CVSS 4.6 (medium), 2026-01-13: Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-20821 - CVSS 6.2 (medium), 2026-01-13: Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
CVE-2026-20820 - CVSS 7.8 (high), 2026-01-13: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20816 - CVSS 7.8 (high), 2026-01-13: Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-0386 - CVSS 7.5 (high), 2026-01-13: Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.
CVE-2025-64678 - CVSS 8.8 (high), 2025-12-09: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62571 - CVSS 7.8 (high), 2025-12-09: Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-62473 - CVSS 6.5 (medium), 2025-12-09: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-62472 - CVSS 7.8 (high), 2025-12-09: Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-62549 - CVSS 8.8 (high), 2025-12-09: Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62470 - CVSS 7.8 (high), 2025-12-09: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-62474 - CVSS 7.8 (high), 2025-12-09: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-62466 - CVSS 7.8 (high), 2025-12-09: Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2025-62458 - CVSS 7.8 (high), 2025-12-09: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-62455 - CVSS 7.8 (high), 2025-12-09: Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2025-54100 - CVSS 7.8 (high), 2025-12-09: Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code…
CVE-2025-62452 - CVSS 8 (high), 2025-11-11: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-62217 - CVSS 7 (high), 2025-11-11: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an…
CVE-2025-62213 - CVSS 7 (high), 2025-11-11: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-60724 - CVSS 9.8 (critical), 2025-11-11: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-60720 - CVSS 7.8 (high), 2025-11-11: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
CVE-2025-60719 - CVSS 7 (high), 2025-11-11: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-60715 - CVSS 8 (high), 2025-11-11: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-60714 - CVSS 7.8 (high), 2025-11-11: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
CVE-2025-60705 - CVSS 7.8 (high), 2025-11-11: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2025-60704 - CVSS 7.5 (high), 2025-11-11: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-60709 - CVSS 7.8 (high), 2025-11-11: Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-59514 - CVSS 7.8 (high), 2025-11-11: Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59513 - CVSS 5.5 (medium), 2025-11-11: Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.
CVE-2025-60703 - CVSS 7.8 (high), 2025-11-11: Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
CVE-2025-59295 - CVSS 8.8 (high), 2025-10-14: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
CVE-2025-59282 - CVSS 7 (high), 2025-10-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute…
CVE-2025-59280 - CVSS 3.1 (low), 2025-10-14: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
CVE-2025-59278 - CVSS 7.8 (high), 2025-10-14: Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59275 - CVSS 7.8 (high), 2025-10-14: Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59277 - CVSS 7.8 (high), 2025-10-14: Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59242 - CVSS 7.8 (high), 2025-10-14: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-59230 - CVSS 7.8 (high), 2025-10-14: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-59214 - CVSS 6.5 (medium), 2025-10-14: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59208 - CVSS 7.1 (high), 2025-10-14: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
CVE-2025-59205 - CVSS 7 (high), 2025-10-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to…
CVE-2025-59201 - CVSS 7.8 (high), 2025-10-14: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
CVE-2025-59198 - CVSS 5 (medium), 2025-10-14: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
CVE-2025-59196 - CVSS 7 (high), 2025-10-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate…
CVE-2025-59190 - CVSS 5.5 (medium), 2025-10-14: Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
CVE-2025-59187 - CVSS 7.8 (high), 2025-10-14: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-58739 - CVSS 6.5 (medium), 2025-10-14: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-58736 - CVSS 7 (high), 2025-10-14: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58735 - CVSS 7 (high), 2025-10-14: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58733 - CVSS 7 (high), 2025-10-14: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58732 - CVSS 7 (high), 2025-10-14: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58730 - CVSS 7 (high), 2025-10-14: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58729 - CVSS 6.5 (medium), 2025-10-14: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
CVE-2025-58726 - CVSS 7.5 (high), 2025-10-14: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-58725 - CVSS 7 (high), 2025-10-14: Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
CVE-2025-58718 - CVSS 8.8 (high), 2025-10-14: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2025-58714 - CVSS 7.8 (high), 2025-10-14: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-55701 - CVSS 7.8 (high), 2025-10-14: Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.
CVE-2025-55700 - CVSS 6.5 (medium), 2025-10-14: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-58717 - CVSS 6.5 (medium), 2025-10-14: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-55695 - CVSS 5.5 (medium), 2025-10-14: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
CVE-2025-55678 - CVSS 7 (high), 2025-10-14: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2025-55335 - CVSS 7.4 (high), 2025-10-14: Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-25004 - CVSS 7.3 (high), 2025-10-14: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-24990 - CVSS 7.8 (high), 2025-10-14: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an…
CVE-2025-24052 - CVSS 7.8 (high), 2025-10-14: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an…
CVE-2025-55234 - CVSS 9.8 (critical), 2025-09-09: SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform…
CVE-2025-55226 - CVSS 6.7 (medium), 2025-09-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code…
CVE-2025-55225 - CVSS 6.5 (medium), 2025-09-09: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-54917 - CVSS 4.3 (medium), 2025-09-09: Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-54916 - CVSS 7.8 (high), 2025-09-09: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2025-54918 - CVSS 8.8 (high), 2025-09-09: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
CVE-2025-54912 - CVSS 7.8 (high), 2025-09-09: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2025-54911 - CVSS 7.3 (high), 2025-09-09: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2025-54915 - CVSS 6.7 (medium), 2025-09-09: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54895 - CVSS 7.8 (high), 2025-09-09: Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.
CVE-2025-54894 - CVSS 7.8 (high), 2025-09-09: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
CVE-2025-54113 - CVSS 8.8 (high), 2025-09-09: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-54109 - CVSS 6.7 (medium), 2025-09-09: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.