Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:*

part: o version: r2 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Server 2008 (d1059944-7e5e-56c5-b342-3a28769f9212)
Edition*
Language*
Software edition*
Target software*
Target hardwareitanium
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0754 vulnerable 2026-06-03 14:39:19.966423 Details available
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
Published: 2019-04-08T23:34:25.000Z
Updated: 2024-08-04T17:58:57.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8639 vulnerable 2026-06-03 14:39:09.226072 Details available
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
Published: 2018-12-12T00:00:00.000Z
Updated: 2025-10-21T23:45:46.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8611 vulnerable 2026-06-03 14:39:09.192592 Details available
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published: 2018-12-12T00:00:00.000Z
Updated: 2025-10-21T23:45:46.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4969 not_vulnerable 2026-06-03 14:32:26.407180 Details available
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
Published: 2012-09-18T10:00:00.000Z
Updated: 2025-10-22T00:05:46.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0151 vulnerable 2026-06-03 14:31:34.511030 Details available
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
Published: 2012-04-10T21:00:00.000Z
Updated: 2025-10-22T00:05:48.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1229 vulnerable 2026-06-03 14:30:59.791219 Details available
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
Published: 2011-04-13T20:07:00.000Z
Updated: 2024-08-06T22:21:33.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3328 not_vulnerable 2026-06-03 14:30:30.890496 Details available
Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka "Uninitialized Memory Corruption Vulnerability."
Published: 2010-10-13T18:00:00.000Z
Updated: 2024-08-07T03:03:19.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2568 vulnerable 2026-06-03 14:30:26.134736 Details available
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
Published: 2010-07-22T10:00:00.000Z
Updated: 2025-10-22T00:05:52.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0249 not_vulnerable 2026-06-03 14:30:07.774956 Details available
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."
Published: 2010-01-15T17:00:00.000Z
Updated: 2026-05-21T03:55:30.221Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.