What’s Vulnerable › Products

Microsoft Windows Server 2008 vulnerabilities

3552 known vulnerabilities, 148 confirmed exploited in the wild (CISA KEV), 337 published in the last 12 months.

Check whether your Microsoft Windows Server 2008 version is affected

Exploited Microsoft Windows Server 2008 vulnerabilities

• CVE-2008-4250 — Microsoft Windows Buffer Overflow Vulnerability
• CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability
• CVE-2013-3918 — Microsoft Windows Out-of-Bounds Write Vulnerability
• CVE-2011-3402 — Microsoft Windows Remote Code Execution Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion Vulnerability
• CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
• CVE-2025-24993 — Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
• CVE-2025-24991 — Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
• CVE-2025-24985 — Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
• CVE-2025-24983 — Microsoft Windows Win32k Use-After-Free Vulnerability
• CVE-2018-8639 — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
• CVE-2025-21418 — Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
• CVE-2024-35250 — Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
• CVE-2024-49138 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2024-43451 — Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

Latest Microsoft Windows Server 2008 vulnerabilities

• CVE-2026-20940 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20936 — Windows NDIS Information Disclosure Vulnerability (CVSS 4.3)
• CVE-2026-20931 — Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-20929 — Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20927 — Windows SMB Server Denial of Service Vulnerability (CVSS 5.3)
• CVE-2026-20925 — NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20922 — Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-20921 — Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20875 — Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-20872 — NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20869 — Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-20868 — Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-20860 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20849 — Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20847 — Microsoft Windows File Explorer Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20843 — Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20840 — Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-20839 — Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2026-20834 — Windows Spoofing Vulnerability (CVSS 4.6)
• CVE-2026-20833 — Windows Kerberos Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2026-20831 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-20828 — Windows rndismp6.sys Information Disclosure Vulnerability (CVSS 4.6)
• CVE-2026-20821 — Remote Procedure Call Information Disclosure Vulnerability (CVSS 6.2)
• CVE-2026-20820 — Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20816 — Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0)