CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product microsoft:windows_server_2008_service_pack_2. Show all products

58 CVEs, showing 1 to 50Page 1 of 2Next

CVE	Severity	Title	Published
CVE-2025-59230 Known exploited	High 7.8	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Assigned by microsoft	Oct 14, 2025
CVE-2025-24990 Known exploited	High 7.8	Windows Agere Modem Driver Elevation of Privilege Vulnerability Assigned by microsoft	Oct 14, 2025
CVE-2025-33073 Known exploited	High 8.8	Windows SMB Client Elevation of Privilege Vulnerability Assigned by microsoft	Jun 10, 2025
CVE-2025-33053 Known exploited	High 8.8	Internet Shortcut Files Remote Code Execution Vulnerability Assigned by microsoft	Jun 10, 2025
CVE-2025-30397 Known exploited	High 7.5	Scripting Engine Memory Corruption Vulnerability Assigned by microsoft	May 13, 2025
CVE-2025-32709 Known exploited	High 7.8	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft	May 13, 2025
CVE-2025-32706 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	May 13, 2025
CVE-2025-32701 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	May 13, 2025
CVE-2025-29824 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 8, 2025
CVE-2025-26633 Known exploited	High 7.0	Microsoft Management Console Security Feature Bypass Vulnerability Assigned by microsoft	Mar 11, 2025
CVE-2025-24993 Known exploited	High 7.8	Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft	Mar 11, 2025
CVE-2025-24991 Known exploited	Medium 5.5	Windows NTFS Information Disclosure Vulnerability Assigned by microsoft	Mar 11, 2025
CVE-2025-24985 Known exploited	High 7.8	Windows Fast FAT File System Driver Remote Code Execution Vulnerability Assigned by microsoft	Mar 11, 2025
CVE-2025-24983 Known exploited	High 7.0	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Assigned by microsoft	Mar 11, 2025
CVE-2025-21418 Known exploited	High 7.8	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft	Feb 11, 2025
CVE-2024-49138 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Dec 10, 2024
CVE-2024-43451 Known exploited	Medium 6.5	NTLM Hash Disclosure Spoofing Vulnerability Assigned by microsoft	Nov 12, 2024
CVE-2024-43572 Known exploited	High 7.8	Microsoft Management Console Remote Code Execution Vulnerability Assigned by microsoft	Oct 8, 2024
CVE-2024-43461 Known exploited	High 8.8	Windows MSHTML Platform Spoofing Vulnerability Assigned by microsoft	Sep 10, 2024
CVE-2024-38217 Known exploited	Medium 5.4	Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft	Sep 10, 2024
CVE-2024-38014 Known exploited	High 7.8	Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft	Sep 10, 2024
CVE-2024-38193 Known exploited	High 7.8	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft	Aug 13, 2024
CVE-2024-38112 Known exploited	High 7.5	Windows MSHTML Platform Spoofing Vulnerability Assigned by microsoft	Jul 9, 2024
CVE-2024-35250 Known exploited	High 7.8	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Assigned by microsoft	Jun 11, 2024
CVE-2023-36025 Known exploited	High 8.8	Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft	Nov 14, 2023
CVE-2023-36036 Known exploited	High 7.8	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft	Nov 14, 2023
CVE-2023-36424 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Nov 14, 2023
CVE-2023-36563 Known exploited	Medium 6.5	Microsoft WordPad Information Disclosure Vulnerability Assigned by microsoft	Oct 10, 2023
CVE-2023-36584 Known exploited	Medium 5.4	Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft	Oct 10, 2023
CVE-2023-36884 Known exploited	High 7.5	Windows Search Remote Code Execution Vulnerability Assigned by microsoft	Jul 11, 2023
CVE-2023-36874 Known exploited	High 7.8	Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft	Jul 11, 2023
CVE-2023-32046 Known exploited	High 7.8	Windows MSHTML Platform Elevation of Privilege Vulnerability Assigned by microsoft	Jul 11, 2023
CVE-2023-29336 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	May 9, 2023
CVE-2023-28252 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 11, 2023
CVE-2023-28229 Known exploited	High 7.0	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft	Apr 11, 2023
CVE-2023-21823 Known exploited	High 7.8	Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft	Feb 14, 2023
CVE-2023-23376 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Feb 14, 2023
CVE-2022-41073 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41033 Known exploited	High 7.8	Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft	Oct 11, 2022
CVE-2022-37969 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Sep 13, 2022
CVE-2022-22047 Known exploited	High 7.8	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft	Jul 12, 2022
CVE-2022-26925 Known exploited	High 8.1	Windows LSA Spoofing Vulnerability Assigned by microsoft	May 10, 2022
CVE-2022-26904 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24521 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-22718 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21999 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21919 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Jan 11, 2022
CVE-2021-42287 Known exploited	High 7.5	Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft	Nov 10, 2021
CVE-2021-42278 Known exploited	High 7.5	Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft	Nov 10, 2021
CVE-2021-41379 Known exploited	Medium 5.5	Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft	Nov 10, 2021

Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.