7.1
High
CVE-2023-24904 Windows Installer Elevation of Privilege Vulnerability
Description
Windows Installer Elevation of Privilege Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server 2008 Service Pack 2 6.0 | 6.0.6003.0 → < 6.0.6003.22070 | 6.0.6003.22070 |
| Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 | 6.0.6003.0 → < 6.0.6003.22070 | 6.0.6003.22070 |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.6003.0 → < 6.0.6003.22070 | 6.0.6003.22070 |
| Windows Server 2008 R2 Service Pack 1 6.1 | 6.1.7601.0 → < 6.1.7601.26519 | 6.1.7601.26519 |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 | 6.1.7601.0 → < 6.1.7601.26519 | 6.1.7601.26519 |
Other CVEs of Windows Server 2008 Service Pack 2
The 1686 CVEs of Windows Server 2008 Service Pack 2 →
CVE-2026-20936
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack
4.3
Medium
CVE-2026-20931
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges…
8.0
High
CVE-2026-20929
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network
7.5
High
CVE-2026-20872
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network
6.5
Medium