9.8
Critical
CVE-2019-1213 A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted…
Description
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server 2008 Service Pack 2 6.0 | 6.0.0 → latest | No fix stated |
| Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 | 6.0.0 → latest | No fix stated |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Server 2008 Service Pack 2
The 1686 CVEs of Windows Server 2008 Service Pack 2 →
CVE-2026-20936
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack
4.3
Medium
CVE-2026-20931
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges…
8.0
High
CVE-2026-20929
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network
7.5
High
CVE-2026-20872
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network
6.5
Medium