Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*

part: o version: * update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Server 2008 (d1059944-7e5e-56c5-b342-3a28769f9212)
Edition*
Language*
Software edition*
Target software*
Target hardwarex64
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-29810 vulnerable 2026-06-08 07:14:56.638401 Active Directory Domain Services Elevation of Privilege Vulnerability
HIGH (7.5)
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
Published: 2025-04-08T17:24:17.578Z
Updated: 2026-02-13T19:33:33.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27740 vulnerable 2026-06-08 07:14:55.589966 Active Directory Certificate Services Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
Published: 2025-04-08T17:23:20.626Z
Updated: 2026-02-13T19:32:37.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4969 not_vulnerable 2026-06-08 05:02:53.475511 Details available
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
Published: 2012-09-18T10:00:00.000Z
Updated: 2025-10-22T00:05:46.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4792 not_vulnerable 2026-06-08 05:02:52.644524 Details available
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
Published: 2012-12-30T18:00:00.000Z
Updated: 2025-10-22T00:05:45.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2532 not_vulnerable 2026-06-08 05:02:04.777735 Details available
Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
Published: 2012-11-14T00:00:00.000Z
Updated: 2024-08-06T19:34:25.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0568 vulnerable 2026-06-08 04:51:09.985765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0555 vulnerable 2026-06-08 04:51:09.948088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.