Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Windows Server 2008 R2 Service Pack 1 — Vulnerabilities & Security Advisories 71

All 71 CVE vulnerabilities found in Windows Server 2008 R2 Service Pack 1, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerabilities for the Windows Server 2008 R2 Service Pack 1 operating system, specifically focusing on security weaknesses identified by the vendor and third-party researchers. It serves as a centralized resource for tracking security flaws associated with this legacy enterprise platform. The content collected here includes critical, high, and medium severity issues ranging from buffer overflows and privilege escalation flaws to cross-site scripting and remote code execution vulnerabilities. The data covers vulnerability disclosures and advisory releases dating back to the product's initial service pack update through its final end-of-support period in January 2020, ensuring a comprehensive historical record. Readers can utilize this resource to track specific vendor advisories issued by Microsoft regarding affected components and updates. It allows security professionals to understand the nature and impact of specific weakness classes on this server environment by examining common attack vectors and exploitation scenarios. Additionally, users can look up the complete vulnerability history for the product to assess risk exposure over time and verify whether specific CVEs apply to their deployed configurations. This aggregation supports compliance audits, patch management planning, and incident response analysis by providing a clear overview of the security landscape for this specific software version without requiring manual searching across multiple disparate sources.

Vendor: Microsoft

CVE IDTitleCVSSSeverityPublished
CVE-2026-20833 Windows Kerberos Information Disclosure Vulnerability CWE-327 5.5 Medium2026-01-13
CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability CWE-284 7.5 High2026-01-13
CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-09-09
CVE-2025-53806 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-53796 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-55225 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54096 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54095 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-53797 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-53798 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-50157 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-53719 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53153 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53148 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53138 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-08-12
CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50156 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-08-12
CVE-2025-49729 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49681 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-07-08
CVE-2025-49673 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49669 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49663 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08

All 71 known CVE vulnerabilities affecting Windows Server 2008 R2 Service Pack 1 with full Chinese analysis, references, and POCs where available.