Microsoft Windows Server 2008 vulnerabilities
3,552 published vulnerabilities in Microsoft Windows Server 2008, 148 of them exploited in the wild. The most were published in 2025 (389), and 26 so far in 2026.
Microsoft Windows Server 2008 vulnerabilities by year
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Microsoft Windows Server 2008 vulnerabilities
- CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution
- CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution
- CVE-2017-8543 Microsoft Windows Search Remote Code Execution
- CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution
- CVE-2008-4250 Microsoft Windows Buffer Overflow
- CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass
- CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution
- CVE-2021-40444 Microsoft MSHTML Remote Code Execution
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.