Microsoft Windows Server 2008 R2 Systems Service Pack 1
73 CVEs affecting Microsoft Windows Server 2008 R2 Systems Service Pack 1. Latest disclosed: 2019-09-03. Critical: 2, High: 38.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1212 | Critical | 9.8 | 2019-08-14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited t… |
CVE-2019-0736 | Critical | 9.8 | 2019-08-14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who succes… |
CVE-2019-1152 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-1151 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-1150 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-1149 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-1145 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-1144 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-0888 | High | 8.8 | 2019-06-12 | A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory. An attacker who successfully exploited the vu… |
CVE-2019-0722 | High | 8.8 | 2019-06-12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest opera… |
CVE-2019-1019 | High | 8.5 | 2019-06-12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an… |
CVE-2019-1169 | High | 7.8 | 2019-08-14 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who succe… |
CVE-2019-1168 | High | 7.8 | 2019-08-14 | An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated… |
CVE-2019-1164 | High | 7.8 | 2019-08-14 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this… |
CVE-2019-1162 | High | 7.8 | 2019-08-14 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully expl… |
CVE-2019-1159 | High | 7.8 | 2019-08-14 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this… |
CVE-2019-1157 | High | 7.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2019-1156 | High | 7.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2019-1155 | High | 7.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2019-1147 | High | 7.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |