Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Microsoft

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) vulnerabilities

1,886 published CVEs name Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among the affected products; CISA lists 69 of them as exploited in the wild.

Published CVEs
1,886
Last 12 months
51
Critical
60
Known exploited
69

Critical 60High 1,365Medium 458Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20131
  2. 201977
  3. 2020157
  4. 2021263
  5. 2022323
  6. 2023354
  7. 2024296
  8. 2025389
  9. 202626

Known exploitedNewest addition to KEV first

  • CVE-2023-36424

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 11 version 22H3

    ExploitedHigh7.8
  • CVE-2025-33073

    Windows SMB Client Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh8.8
  • CVE-2025-59230

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.8
  • CVE-2025-24990

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.8
  • CVE-2021-43226

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1809

    ExploitedHigh7.8
  • CVE-2025-33053

    Internet Shortcut Files Remote Code Execution Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh8.8
  • CVE-2025-30397

    Scripting Engine Memory Corruption Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.5
  • CVE-2025-32709

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.8
  • CVE-2025-32706

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.8
  • CVE-2025-32701

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-20936

    Windows NDIS Information Disclosure Vulnerability

    Microsoft · Windows 10 Version 1607

    Medium4.3
  • CVE-2026-20931

    Windows Telephony Service Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High8.0
  • CVE-2026-20929

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.5
  • CVE-2026-20872

    NTLM Hash Disclosure Spoofing Vulnerability

    Microsoft · Windows 10 Version 1607

    Medium6.5
  • CVE-2026-20868

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Microsoft · Windows 10 Version 1607

    High8.8
  • CVE-2026-20849

    Windows Kerberos Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.5
  • CVE-2026-20843

    Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.8
  • CVE-2026-20940

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.8
  • CVE-2026-20927

    Windows SMB Server Denial of Service Vulnerability

    Microsoft · Windows 10 Version 1607

    Medium5.3
  • CVE-2026-20925

    NTLM Hash Disclosure Spoofing Vulnerability

    Microsoft · Windows 10 Version 1607

    Medium6.5