Patch tracker / Products / Windows Server 2008 R2

Windows Server 2008 R2: vulnerabilities and security updates

Every CVE affecting Windows Server 2008 R2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
547
Updates (KBs)
42
Actively exploited (KEV)
23
Critical Severity
93

CVEs affecting Windows Server 2008 R2

CVESeverityCVSSEPSSStatus
CVE-2025-26633High7.059%KEVRansomware
CVE-2025-29824High7.814%KEVRansomware
CVE-2025-33073High8.887%KEV
CVE-2025-33053High8.887%KEV
CVE-2024-49138High7.884%KEV
CVE-2024-43451Medium6.584%KEV
CVE-2024-38193High9.871%KEV
CVE-2024-43572High9.067%KEV
CVE-2025-32701High7.864%KEV
CVE-2025-32706High7.864%KEV
CVE-2025-32709High7.864%KEV
CVE-2025-30397High7.564%KEV
CVE-2024-43461High9.854%KEV
CVE-2024-38014High9.854%KEV
CVE-2024-38217High9.854%KEV
CVE-2025-24985High7.859%KEV
CVE-2025-24993High7.859%KEV
CVE-2025-24983High7.059%KEV
CVE-2025-24054Medium6.559%KEV
CVE-2025-24991Medium5.559%KEV
CVE-2025-21418High7.840%KEV
CVE-2025-24990High7.86.4%KEV
CVE-2025-59230High7.86.4%KEV
CVE-2024-38203Critical9.884%-
CVE-2024-49112Critical9.884%-
CVE-2025-32715High8.887%-
CVE-2025-33064High8.887%-
CVE-2025-33066High8.887%-
CVE-2025-33057High8.887%-
CVE-2025-21210Critical9.881%-
CVE-2025-21214Critical9.881%-
CVE-2025-21215Critical9.881%-
CVE-2025-21217Critical9.881%-
CVE-2025-21226Critical9.881%-
CVE-2025-21227Critical9.881%-
CVE-2025-21228Critical9.881%-
CVE-2025-21232Critical9.881%-
CVE-2025-21242Critical9.881%-
CVE-2025-21249Critical9.881%-
CVE-2025-21255Critical9.881%-
CVE-2025-21256Critical9.881%-
CVE-2025-21258Critical9.881%-
CVE-2025-21260Critical9.881%-
CVE-2025-21261Critical9.881%-
CVE-2025-21263Critical9.881%-
CVE-2025-21265Critical9.881%-
CVE-2025-21272Critical9.881%-
CVE-2025-21288Critical9.881%-
CVE-2025-21298Critical9.881%-
CVE-2025-21307Critical9.881%-
CVE-2025-21310Critical9.881%-
CVE-2025-21319Critical9.881%-
CVE-2025-21320Critical9.881%-
CVE-2025-21324Critical9.881%-
CVE-2025-21327Critical9.881%-
CVE-2025-21336Critical9.881%-
CVE-2025-21341Critical9.881%-
CVE-2025-21189Critical9.881%-
CVE-2025-21268Critical9.881%-
CVE-2025-21269Critical9.881%-
CVE-2025-21328Critical9.881%-
CVE-2025-21329Critical9.881%-
CVE-2025-21332Critical9.881%-
CVE-2025-33070High8.187%-
CVE-2024-43627High8.884%-
CVE-2024-43628High8.884%-
CVE-2024-43620High8.884%-
CVE-2024-43621High8.884%-
CVE-2024-43622High8.884%-
CVE-2024-43635High8.884%-
CVE-2024-49085High8.884%-
CVE-2024-49086High8.884%-
CVE-2024-49102High8.884%-
CVE-2024-49104High8.884%-
CVE-2024-49125High8.884%-
CVE-2024-49080High8.884%-
CVE-2025-32712High7.887%-
CVE-2025-32713High7.887%-
CVE-2025-32714High7.887%-
CVE-2025-32716High7.887%-
CVE-2025-33075High7.887%-
CVE-2025-32724High7.587%-
CVE-2025-33056High7.587%-
CVE-2024-49105High8.484%-
CVE-2024-49122High8.184%-
CVE-2024-49124High8.184%-
CVE-2024-49126High8.184%-
CVE-2024-49118High8.184%-
CVE-2024-49127High8.184%-
CVE-2025-21223High8.881%-
CVE-2025-21233High8.881%-
CVE-2025-21236High8.881%-
CVE-2025-21237High8.881%-
CVE-2025-21238High8.881%-
CVE-2025-21240High8.881%-
CVE-2025-21243High8.881%-
CVE-2025-21244High8.881%-
CVE-2025-21245High8.881%-
CVE-2025-21246High8.881%-
CVE-2025-21250High8.881%-
CVE-2025-21252High8.881%-
CVE-2025-21266High8.881%-
CVE-2025-21273High8.881%-
CVE-2025-21282High8.881%-
CVE-2025-21286High8.881%-
CVE-2025-21302High8.881%-
CVE-2025-21303High8.881%-
CVE-2025-21305High8.881%-
CVE-2025-21306High8.881%-
CVE-2025-21339High8.881%-
CVE-2025-21409High8.881%-
CVE-2025-21411High8.881%-
CVE-2025-21413High8.881%-
CVE-2025-21417High8.881%-
CVE-2024-43623High7.884%-
CVE-2024-43626High7.884%-
CVE-2024-43644High7.884%-
CVE-2024-49046High7.884%-
CVE-2024-43641High7.884%-
CVE-2024-49019High7.884%-
CVE-2024-49072High7.884%-
CVE-2024-49088High7.884%-
CVE-2024-49090High7.884%-
CVE-2024-43450High7.584%-
CVE-2024-49096High7.584%-
CVE-2024-49121High7.584%-
CVE-2024-49113High7.584%-
CVE-2025-21294High8.181%-
CVE-2025-21295High8.181%-
CVE-2025-21297High8.181%-
CVE-2024-49089High7.284%-
CVE-2025-21287High7.881%-
CVE-2025-21338High7.881%-
CVE-2024-49084High7.084%-
CVE-2024-43634Medium6.884%-
CVE-2024-43637Medium6.884%-
CVE-2024-43638Medium6.884%-
CVE-2024-43643Medium6.884%-
CVE-2024-43449Medium6.884%-
CVE-2024-49082Medium6.884%-
CVE-2025-21220High7.581%-
CVE-2025-21230High7.581%-
CVE-2025-21231High7.581%-
CVE-2025-21251High7.581%-
CVE-2025-21270High7.581%-
CVE-2025-21277High7.581%-
CVE-2025-21285High7.581%-
CVE-2025-21289High7.581%-
CVE-2025-21290High7.581%-
CVE-2025-21296High7.581%-
CVE-2025-21300High7.581%-
CVE-2025-21389High7.581%-
CVE-2025-21276High7.581%-
CVE-2025-21331High7.381%-
CVE-2026-20821Critical9.871%-
CVE-2026-20828Critical9.871%-
CVE-2026-20833Critical9.871%-
CVE-2026-20834Critical9.871%-
CVE-2026-20839Critical9.871%-
CVE-2026-20847Critical9.871%-
CVE-2026-20872Critical9.871%-
CVE-2026-20925Critical9.871%-
CVE-2026-20927Critical9.871%-
CVE-2026-20936Critical9.871%-
CVE-2024-38199Critical9.871%-
CVE-2024-38063Critical9.871%-
CVE-2024-38118Critical9.871%-
CVE-2024-38122Critical9.871%-
CVE-2024-38140Critical9.871%-
CVE-2024-38151Critical9.871%-
CVE-2024-38214Critical9.871%-
CVE-2026-20868High8.871%-
CVE-2024-38114High8.871%-
CVE-2024-38115High8.871%-
CVE-2024-38116High8.871%-
CVE-2024-38121High8.871%-
CVE-2024-38128High8.871%-
CVE-2024-38130High8.871%-
CVE-2024-38131High8.871%-
CVE-2024-38144High8.871%-
CVE-2024-38154High8.871%-
CVE-2024-38180High8.871%-
CVE-2024-38120High8.871%-
CVE-2026-20931High8.071%-
CVE-2024-29995High8.171%-
CVE-2023-31096High7.871%-
CVE-2024-55414High7.871%-
CVE-2026-20816High7.871%-
CVE-2026-20820High7.871%-
CVE-2026-20831High7.871%-
CVE-2026-20840High7.871%-
CVE-2026-20843High7.871%-
CVE-2026-20860High7.871%-
CVE-2026-20922High7.871%-
CVE-2026-20940High7.871%-
CVE-2024-43534Critical9.067%-
CVE-2024-38124Critical9.067%-
CVE-2024-43456Critical9.067%-
CVE-2024-43520Critical9.067%-
CVE-2024-43547Critical9.067%-
CVE-2024-43570Critical9.067%-
CVE-2024-38196High7.871%-
CVE-2024-38117High7.871%-
CVE-2024-38125High7.871%-
CVE-2024-38127High7.871%-
CVE-2024-38134High7.871%-
CVE-2024-38152High7.871%-
CVE-2024-38153High7.871%-
CVE-2024-43518High8.867%-
CVE-2024-43519High8.867%-
CVE-2024-43532High8.867%-
CVE-2024-43608High8.867%-
CVE-2024-43607High8.867%-
CVE-2024-38265High8.867%-
CVE-2024-43453High8.867%-
CVE-2024-38212High8.867%-
CVE-2024-43517High8.867%-
CVE-2024-43549High8.867%-
CVE-2024-43564High8.867%-
CVE-2024-43589High8.867%-
CVE-2024-43592High8.867%-
CVE-2024-43593High8.867%-
CVE-2024-43599High8.867%-
CVE-2024-43611High8.867%-
CVE-2026-0386High7.571%-
CVE-2026-20849High7.571%-
CVE-2026-20875High7.571%-
CVE-2026-20921High7.571%-
CVE-2026-20929High7.571%-
CVE-2024-38198High7.571%-
CVE-2024-37968High7.571%-
CVE-2026-20869High7.071%-
CVE-2025-29959High8.864%-
CVE-2025-29960High8.864%-
CVE-2025-29966High8.864%-
CVE-2025-29967High8.864%-
CVE-2025-29830High8.864%-
CVE-2025-29832High8.864%-
CVE-2025-29835High8.864%-
CVE-2025-29836High8.864%-
CVE-2025-29837High8.864%-
CVE-2025-29839High8.864%-
CVE-2025-29954High8.864%-
CVE-2025-29956High8.864%-
CVE-2025-29957High8.864%-
CVE-2025-29958High8.864%-
CVE-2025-29961High8.864%-
CVE-2025-29962High8.864%-
CVE-2025-29974High8.864%-
CVE-2024-38261High7.867%-

Showing the 250 highest-risk of 547 CVEs. See all in the CVE reference.

Updates (KBs) for Windows Server 2008 R2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50536202025-03-11High8.859%21KEVRansomware
KB50536272025-03-11High8.859%21KEVRansomware
KB50555612025-04-08High8.814%42KEVRansomware
KB50555702025-04-08High8.814%42KEVRansomware
KB50486762024-12-10Critical9.884%23KEV
KB50486952024-12-10Critical9.884%23KEV
KB50610782025-06-10High8.887%14KEV
KB50466872024-11-12High8.884%20KEV
KB50467052024-11-12High8.884%20KEV
KB50610362025-06-10High8.883%13KEV
KB50418232024-08-13Critical9.871%29KEV
KB50418382024-08-13Critical9.871%29KEV
KB50443212024-10-08Critical9.067%36KEV
KB50443562024-10-08Critical9.067%36KEV
KB50430492024-09-10High8.854%2KEV
KB50430922024-09-10High8.854%19KEV
KB50520162025-02-11High8.840%21KEV
KB50584302025-06-10High8.827%29KEV
KB50584542025-06-10High8.827%29KEV
KB50431292024-09-10High8.822%18KEV
KB50520322025-02-11High8.89.4%20KEV
KB50668722025-10-14High8.86.4%37KEV
KB50668762025-10-14High8.86.4%37KEV
KB50611952025-05-13High7.82.2%1KEV
KB50611962025-05-13High7.82.2%1KEV
KB50500062025-01-14Critical9.881%71-
KB50500492025-01-14Critical9.881%78-
KB50639272025-08-12Critical9.848%38-
KB50639472025-08-12Critical9.848%38-
KB50626192025-08-12Critical9.833%55-
KB50626322025-08-12Critical9.833%55-
KB50654682025-09-09High8.820%30-
KB50655102025-09-09High8.820%30-
KB50736952026-01-13High8.820%28-
KB50736992026-01-13High8.820%28-
KB50689042025-12-09Critical9.85.9%15-
KB50689082025-12-09Critical9.85.9%15-
KB50715012025-12-09High8.82.2%10-
KB50715062025-12-09High8.82.2%10-
KB50404972024-08-13High7.80.5%1-
KB50404982024-08-13High7.80.5%1-
KB50535932025-03-11Medium4.33.0%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.