Skip to content

Vulnerabilities of Microsoft Windows Server 2008 R2 Service Pack 1

Is your version affected?

CVE Summary Score Published
CVE-2025-32710 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 8.1 High Jun 10, 2025
CVE-2025-24063 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High May 13, 2025
CVE-2025-32707 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.8 High May 13, 2025
CVE-2025-30388 Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally 7.8 High May 13, 2025
CVE-2025-30397 Exploited Microsoft Windows Scripting Engine Type Confusion Vulnerability 7.5 High May 13, 2025
CVE-2025-30385 Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally 7.8 High May 13, 2025
CVE-2025-29974 Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an… 5.7 Medium May 13, 2025
CVE-2025-29962 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network 8.8 High May 13, 2025
CVE-2025-29961 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29958 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium May 13, 2025
CVE-2025-29957 Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally 6.2 Medium May 13, 2025
CVE-2025-29956 Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network 5.4 Medium May 13, 2025
CVE-2025-29954 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized… 5.9 Medium May 13, 2025
CVE-2025-29839 Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally 4.0 Medium May 13, 2025
CVE-2025-29837 Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to… 5.5 Medium May 13, 2025
CVE-2025-29836 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29835 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29832 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29831 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network 7.5 High May 13, 2025
CVE-2025-29830 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium May 13, 2025
CVE-2025-32709 Exploited Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-32706 Exploited Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 7.8 High May 13, 2025
CVE-2025-32701 Exploited Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-29969 Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute… 7.5 High May 13, 2025
CVE-2025-29968 Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service… 6.5 Medium May 13, 2025

Other Microsoft products