What’s Vulnerable › Products

Microsoft Windows Server 2008 R2 Service Pack 1 vulnerabilities

1900 known vulnerabilities, 72 confirmed exploited in the wild (CISA KEV), 337 published in the last 12 months.

Check whether your Microsoft Windows Server 2008 R2 Service Pack 1 version is affected

Exploited Microsoft Windows Server 2008 R2 Service Pack 1 vulnerabilities

• CVE-2023-36424 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2025-33073 — Windows SMB Client Elevation of Privilege Vulnerability
• CVE-2025-59230 — Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
• CVE-2025-24990 — Windows Agere Modem Driver Elevation of Privilege Vulnerability
• CVE-2021-43226 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2025-33053 — Internet Shortcut Files Remote Code Execution Vulnerability
• CVE-2025-32709 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2025-32706 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2025-32701 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2025-30397 — Scripting Engine Memory Corruption Vulnerability
• CVE-2025-24054 — NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2025-29824 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2025-26633 — Microsoft Management Console Security Feature Bypass Vulnerability
• CVE-2025-24993 — Windows NTFS Remote Code Execution Vulnerability
• CVE-2025-24991 — Windows NTFS Information Disclosure Vulnerability
• CVE-2025-24985 — Windows Fast FAT File System Driver Remote Code Execution Vulnerability
• CVE-2025-24983 — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2025-21418 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2024-35250 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-49138 — Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2024-43451 — NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2024-43572 — Microsoft Management Console Remote Code Execution Vulnerability
• CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability
• CVE-2024-38217 — Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2024-38014 — Windows Installer Elevation of Privilege Vulnerability

Latest Microsoft Windows Server 2008 R2 Service Pack 1 vulnerabilities

• CVE-2026-20936 — Windows NDIS Information Disclosure Vulnerability (CVSS 4.3)
• CVE-2026-20931 — Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-20929 — Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20872 — NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20868 — Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-20849 — Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20843 — Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20940 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20927 — Windows SMB Server Denial of Service Vulnerability (CVSS 5.3)
• CVE-2026-20925 — NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20922 — Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-20921 — Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-20875 — Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-20869 — Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-20860 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20847 — Microsoft Windows File Explorer Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-20840 — Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-20839 — Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2026-20834 — Windows Spoofing Vulnerability (CVSS 4.6)
• CVE-2026-20833 — Windows Kerberos Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2026-20831 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-20828 — Windows rndismp6.sys Information Disclosure Vulnerability (CVSS 4.6)
• CVE-2026-20821 — Remote Procedure Call Information Disclosure Vulnerability (CVSS 6.2)
• CVE-2026-20820 — Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-20816 — Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0)