Microsoft Windows Server 2008 Service Pack 2 vulnerabilities, page 4
1,686 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2008 Service Pack 2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26901microsoftwindows_10+27
EPSS score0.81%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26897microsoftwindows_server_2008+15EPSS score11.64%
Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-26442microsoftwindows_10+30EPSS score0.79%
Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2021-26872microsoftwindows_10+27EPSS score0.75%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26887microsoftwindows_10+27EPSS score1.06%
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.
To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.
This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance.CVE-2021-26873microsoftwindows_10+27EPSS score1.15%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-26877microsoftwindows_server_2008+15EPSS score17.74%
Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-26898microsoftwindows_10+27EPSS score0.87%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26894microsoftwindows_server_2008+15EPSS score7.75%
Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-26415microsoftwindows_10+28EPSS score3.57%
Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26882microsoftwindows_10+27EPSS score2.11%
Remote Access API Elevation of Privilege VulnerabilityCVE-2021-26893microsoftwindows_server_2008+15EPSS score7.02%
Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-26896microsoftwindows_server_2008+15EPSS score7.85%
Windows DNS Server Denial of Service VulnerabilityCVE-2021-26878microsoftwindows_10+27EPSS score0.85%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-26875microsoftwindows_10+27EPSS score0.86%
Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-26414microsoftwindows_10+28EPSS score49.84%
Windows DCOM Server Security Feature BypassCVE-2021-26862microsoftwindows_10+27EPSS score1.25%
Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26899microsoftwindows_10+27EPSS score0.97%
Windows UPnP Device Host Elevation of Privilege VulnerabilityCVE-2021-26861microsoftwindows_10+27EPSS score2.89%
Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-26424microsoftwindows_10+26EPSS score61.13%
Windows TCP/IP Remote Code Execution Vulnerability