Skip to content

Vulnerabilities of Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2025-55701 Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-55700 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Oct 14, 2025
CVE-2025-55335 Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.4 High Oct 14, 2025
CVE-2025-24052 Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows… 7.8 High Oct 14, 2025
CVE-2025-24990 Exploited Microsoft Windows Untrusted Pointer Dereference Vulnerability 7.8 High Oct 14, 2025
CVE-2025-55234 SMB Server might be susceptible to relay attacks depending on the configuration 8.8 High Sep 9, 2025
CVE-2025-54917 Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a… 4.3 Medium Sep 9, 2025
CVE-2025-54915 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54113 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Sep 9, 2025
CVE-2025-54109 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54107 Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security… 4.3 Medium Sep 9, 2025
CVE-2025-54104 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54094 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54093 Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate… 7.0 High Sep 9, 2025
CVE-2025-53810 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-53808 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-53806 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Sep 9, 2025
CVE-2025-53799 Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information… 5.5 Medium Sep 9, 2025
CVE-2025-53796 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Sep 9, 2025
CVE-2025-55225 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Sep 9, 2025
CVE-2025-55226 Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54918 Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network 8.8 High Sep 9, 2025
CVE-2025-54916 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Sep 9, 2025
CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability 7.8 High Sep 9, 2025
CVE-2025-54110 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally 8.8 High Sep 9, 2025

Other Microsoft products