Sploitus

171 exploited vulnerabilities in Windows Server 2008

Showing 1–50 of 171, highest-scoring first

Vendors
Microsoft, Adobe, Apple
With known exploits
171
Affected Microsoft Windows 10 1507 versions
< 10.0.10240.19805, 10.0.10240.19325
Affected Microsoft Windows 10 1607 versions
All versions
Affected Microsoft Windows 10 1809 versions
< 10.0.17763.4131, 10.0.17763.3046
Affected Microsoft Windows 10 20h2 versions
< 10.0.19042.2728, 10.0.19042.1766
Affected Microsoft Windows 10 21h2 versions
< 10.0.19044.2728, 10.0.19044.1766
Affected Microsoft Windows 10 22h2 versions
< 10.0.19045.2728
Affected Microsoft Windows 11 21h2 versions
< 10.0.22000.1696, 10.0.22000.739
Affected Microsoft Windows 11 22h2 versions
< 10.0.22000.1413

Vulnerabilities with exploits

Highest CVSS first — 47 of these already have exploit code on Sploitus

CVE-2023-23415
CVSS 10.0 CRITICAL 2023-03-14FIX AVAILABLE
CVE-2022-30190 62 exploits
CVSS 10.0 HIGH 2022-05-30FIX AVAILABLE
Exploit for CVE-2022-30190Exploit for CVE-2022-30190
CVE-2017-8543
CVSS 10.0 CRITICAL 2017-06-13FIX AVAILABLE
CVE-2016-7182 1 exploit
CVSS 10.0 CRITICAL 2016-10-11FIX AVAILABLE
Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)
CVE-2016-3236 2 exploits
CVSS 10.0 CRITICAL 2016-06-14
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2014-6321
CVSS 10.0 HIGH 2014-11-11FIX AVAILABLE
CVE-2013-3906 6 exploits
CVSS 10.0 HIGH 2013-11-05FIX AVAILABLE
Microsoft Tagged Image File Format (TIFF) Integer OverflowMicrosoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability
CVE-2011-2013 2 exploits
CVSS 10.0 CRITICAL 2011-11-08
Microsoft Windows TCP/IP引用计数溢出漏洞(MS11-083)Microsoft Windows - TCP/IP Stack Reference Counter Integer Overflow (MS11-083)
CVE-2011-0654 3 exploits
CVSS 10.0 HIGH 2011-02-15FIX AVAILABLE
Microsoft Windows Browser Pool Denial of ServiceMicrosoft Windows Browser Pool DoS
CVE-2010-2550 4 exploits
CVSS 10.0 HIGH 2010-08-11FIX AVAILABLE
Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow Denial of ServiceMicrosoft SMB Server Zero Size Pool Allocation
CVE-2010-0476 1 exploit
CVSS 10.0 HIGH 2010-04-14FIX AVAILABLE
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0269 1 exploit
CVSS 10.0 HIGH 2010-04-14
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0239 2 exploits
CVSS 10.0 HIGH 2010-02-10FIX AVAILABLE
Microsoft Windows ICMPv6路由播发缓冲区溢出漏洞（MS10-009）Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
CVE-2010-0231 5 exploits
CVSS 10.0 HIGH 2010-02-10
Windows NTLM Weak Nonce VulnerabilityWindows NTLM Weak Nonce Vulnerability
CVE-2008-4250 16 exploits
CVSS 10.0 CRITICAL 2008-10-23FIX AVAILABLE
Exploit for Code Injection in MicrosoftExploit for Code Injection in Microsoft
CVE-2011-0657 2 exploits
CVSS 9.8 CRITICAL 2011-04-13FIX AVAILABLE
Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun Denial of ServiceMicrosoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS
CVE-2018-8423 1 exploit
CVSS 9.3 HIGH 2018-05-08FIX AVAILABLE
SRC-2018-0029 : Microsoft Windows Jet Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2018-8544 3 exploits
CVSS 9.3 HIGH 2018-11-13FIX AVAILABLE
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-FreeVBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free
CVE-2018-8420 1 exploit
CVSS 9.3 HIGH 2018-09-11FIX AVAILABLE
Exploit for CVE-2014-4878
CVE-2017-8558 2 exploits
CVSS 9.3 HIGH 2017-06-29
Microsoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API ExploitMicrosoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API
CVE-2017-0290 5 exploits
CVSS 9.3 HIGH 2017-05-08
📄 Microsoft Malware Protection Engine Type ConfusionMicrosoft Malware Protection Engine RCE (CVE-2017-0290)
CVE-2017-8682 2 exploits
CVSS 9.3 HIGH 2017-09-12FIX AVAILABLE
Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with MalformeMicrosoft Windows Kernel - 'win32k.sys' '.TTF' Font Processing Out-of-Bounds Reads/Writes with Malformed 'fpgm' table 'win32k!bGeneratePath' (Denial of Service)
CVE-2017-0283 3 exploits
CVSS 9.3 HIGH 2017-06-13
Microsoft Windows - USP10!MergeLigRecords Uniscribe Font Processing Heap-Based Memory CorruptionMicrosoft Windows Uniscribe Remote Code Execution Vulnerability(CVE-2017-0283)
CVE-2017-8464 20 exploits
CVSS 9.3 HIGH 2017-06-13
Exploit for CVE-2017-0213Exploit for CVE-2017-0213
CVE-2017-0108 2 exploits
CVSS 9.3 HIGH 2017-03-14FIX AVAILABLE
Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MSMicrosoft Windows - 'USP10!otlList::insertAt' Uniscribe Font Processing Heap Buffer Overflow (MS17-011)
CVE-2016-3237 4 exploits
CVSS 9.3 HIGH 2016-08-09FIX AVAILABLE
Kerberos Security Feature BypassKerberos in Microsoft Windows - Security Feature Bypass (MS16-101)
CVE-2016-3213 2 exploits
CVSS 9.3 HIGH 2016-06-14FIX AVAILABLE
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2016-3223 4 exploits
CVSS 9.3 HIGH 2016-06-14
Microsoft Windows 7 (x32/x64) - Group Policy Privilege Escalation (MS16-072)Microsoft Windows 7 (x86x64) - Group Policy Privilege Escalation (MS16-072)
CVE-2016-0170 2 exploits
CVSS 9.3 HIGH 2016-05-10FIX AVAILABLE
Microsoft Windows - gdi32.dll Heap Based Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPMicrosoft Windows - 'gdi32.dll' Heap Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPE EMF Record (MS16-055)
CVE-2016-0145 2 exploits
CVSS 9.3 HIGH 2016-04-12FIX AVAILABLE
Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)
CVE-2016-0121 2 exploits
CVSS 9.3 HIGH 2016-03-08FIX AVAILABLE
Microsoft Windows - Kernel ATMFD.dll OTF Font Processing Pool-Based Buffer Overflow (MS16-026)Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
CVE-2016-0015 2 exploits
CVSS 9.3 HIGH 2016-01-12FIX AVAILABLE
Microsoft Windows devenum.dll!DeviceMoniker::Load() - Heap Corruption Buffer Underflow (MS16-007)Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
CVE-2015-2464 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
CVE-2015-2463 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory AccessMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
CVE-2015-2462 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
CVE-2015-2460 3 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory AccessWindows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access Exploit
CVE-2015-2459 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access ExploitMicrosoft Windows - 'ATMFD.DLL' CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
CVE-2015-2456 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow ExploiMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
CVE-2015-2455 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
CVE-2015-2432 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Write to Uninitialized Address Due to Malformed CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Write to Uninitialized Address Due to Malformed CFF Table
CVE-2015-0096 17 exploits
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows LNK File Code Execution ExploitMicrosoft Windows LNK File Code Execution
CVE-2015-0081 1 exploit
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows - Text Services Memory Corruption (MS15-020)
CVE-2015-2510 1 exploit
CVSS 9.3 HIGH 2015-09-08FIX AVAILABLE
Microsoft Office 2007 - 'OGL.dll' ValidateBitmapInfo Bounds Check Failure (MS15-097)
CVE-2014-6352 15 exploits
CVSS 9.3 HIGH 2014-10-21
Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-ExecutionMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2014-4114 24 exploits
CVSS 9.3 HIGH 2014-10-14
Windows-OLE-Package-ManagerMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2013-3174 5 exploits
CVSS 9.3 HIGH 2013-07-09FIX AVAILABLE
DirectShow Arbitrary Memory Overwrite Vulnerability (MS13-056)Microsoft DirectShow - Arbitrary Memory Overwrite (MS13-056)
CVE-2013-0810 10 exploits
CVSS 9.3 HIGH 2013-09-11FIX AVAILABLE
Microsoft Windows 10 - Theme API (ThemePack) File Parsing ExploitMicrosoft Windows 10 - Theme API ThemePack File Parsing
CVE-2012-0002 12 exploits
CVSS 9.3 HIGH 2012-03-13FIX AVAILABLE
Alfred-TryHackMe-Walkthrough-Jenkins-Exploitation-Windows-Token-Privilege-EscalationMS12-020 Microsoft Remote Desktop Checker
CVE-2011-5046 1 exploit
CVSS 9.3 HIGH 2011-12-30FIX AVAILABLE
Apple Safari - GdiDrawStream Blue Screen of Death
CVE-2011-2003 4 exploits
CVSS 9.3 HIGH 2011-10-11FIX AVAILABLE
Microsoft Windows - .fon Kernel-Mode Buffer Overrun (PoC) (MS11-077)Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)