Microsoft Vulnerabilities and Affected Products
Vulnerabilities associated with Windows Server 2008 Service Pack 2.
Products
Clear product- Windows Server 20194,131 vulnerabilities
- Windows Server 2019 (Server Core installation)4,034 vulnerabilities
- Windows 10 Version 18093,762 vulnerabilities
- Windows Server 20163,677 vulnerabilities
- Windows Server 20223,485 vulnerabilities
- Windows Server 2016 (Server Core installation)3,473 vulnerabilities
- Windows 10 Version 16073,184 vulnerabilities
- Windows 10 Version 21H23,063 vulnerabilities
- Windows Server 2012 R22,998 vulnerabilities
- Windows Server 2012 R2 (Server Core installation)2,853 vulnerabilities
- Windows Server 20122,824 vulnerabilities
- Windows Server 2012 (Server Core installation)2,691 vulnerabilities
- Windows 10 Version 22H22,565 vulnerabilities
- Windows 10 Version 15072,277 vulnerabilities
- Windows 11 Version 24H21,924 vulnerabilities
- Windows Server 20251,917 vulnerabilities
- Windows Server 2025 (Server Core installation)1,917 vulnerabilities
- Windows Server 2008 R2 Service Pack 11,874 vulnerabilities
- Windows Server 2008 R2 Service Pack 1 (Server Core installation)1,860 vulnerabilities
- Windows 11 Version 23H21,845 vulnerabilities
- Windows 11 version 22H21,776 vulnerabilities
- Windows Server 2022, 23H2 Edition (Server Core installation)1,725 vulnerabilities
- Windows Server 2008 Service Pack 2 (Server Core installation)1,667 vulnerabilities
- Windows Server 2008 Service Pack 21,664 vulnerabilities
- Windows 11 version 21H21,560 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-49138HIGH | Windows Common Log File System Driver Elevation of Privilege VulnerabilityWindows Common Log File System Driver Elevation of Privilege Vulnerability CWE-122Dec 10, 2024 | CVSS7.8v3.1 | EPSS25.4% | PoCs10 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49127HIGH | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | CVSS8.1v3.1 | EPSS1.27% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49118HIGH | Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | CVSS8.1v3.1 | EPSS1.43% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49113HIGH | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability CWE-125Dec 10, 2024 | CVSS7.5v3.1 | EPSS83% | PoCs6 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49112CRITICAL | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability CWE-190Dec 10, 2024 | CVSS9.8v3.1 | EPSS70.9% | PoCs4 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49090HIGH | Windows Common Log File System Driver Elevation of Privilege VulnerabilityWindows Common Log File System Driver Elevation of Privilege Vulnerability CWE-822Dec 10, 2024 | CVSS7.8v3.1 | EPSS1.06% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49088HIGH | Windows Common Log File System Driver Elevation of Privilege VulnerabilityWindows Common Log File System Driver Elevation of Privilege Vulnerability CWE-126Dec 10, 2024 | CVSS7.8v3.1 | EPSS1.03% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49082MEDIUM | Windows File Explorer Information Disclosure VulnerabilityWindows File Explorer Information Disclosure Vulnerability CWE-22Dec 10, 2024 | CVSS6.8v3.1 | EPSS1.57% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49080HIGH | Windows IP Routing Management Snapin Remote Code Execution VulnerabilityWindows IP Routing Management Snapin Remote Code Execution Vulnerability CWE-122Dec 10, 2024 | CVSS8.8v3.1 | EPSS1.7% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49072HIGH | Windows Task Scheduler Elevation of Privilege VulnerabilityWindows Task Scheduler Elevation of Privilege Vulnerability CWE-122Dec 10, 2024 | CVSS7.8v3.1 | EPSS0.611% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49126HIGH | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityWindows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | CVSS8.1v3.1 | EPSS1.27% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49125HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122Dec 10, 2024 | CVSS8.8v3.1 | EPSS1.51% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49124HIGH | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution VulnerabilityLightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability CWE-362Dec 10, 2024 | CVSS8.1v3.1 | EPSS1.4% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49122HIGH | Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | CVSS8.1v3.1 | EPSS20.4% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49121HIGH | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability CWE-476Dec 10, 2024 | CVSS7.5v3.1 | EPSS2.32% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49104HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122Dec 10, 2024 | CVSS8.8v3.1 | EPSS1.66% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49102HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122Dec 10, 2024 | CVSS8.8v3.1 | EPSS1.66% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49096HIGH | Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability CWE-400Dec 10, 2024 | CVSS7.5v3.1 | EPSS2.83% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49089HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | CVSS7.2v3.1 | EPSS2.04% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49086HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122Dec 10, 2024 | CVSS8.8v3.1 | EPSS1.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49085HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | CVSS8.8v3.1 | EPSS1.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49084HIGH | Windows Kernel Elevation of Privilege VulnerabilityWindows Kernel Elevation of Privilege Vulnerability CWE-362Dec 10, 2024 | CVSS7.0v3.1 | EPSS0.434% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49019HIGH | Active Directory Certificate Services Elevation of Privilege VulnerabilityActive Directory Certificate Services Elevation of Privilege Vulnerability CWE-1390Nov 12, 2024 | CVSS7.8v3.1 | EPSS1.97% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38203MEDIUM | Windows Package Library Manager Information Disclosure VulnerabilityWindows Package Library Manager Information Disclosure Vulnerability CWE-693Nov 12, 2024 | CVSS6.2v3.1 | EPSS0.677% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-43641HIGH | Windows Registry Elevation of Privilege VulnerabilityWindows Registry Elevation of Privilege Vulnerability CWE-190Nov 12, 2024 | CVSS7.8v3.1 | EPSS0.66% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |