Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

Windows Server 2008 R2 Service Pack 1 — Vulnerabilities & Security Advisories 56

All 56 CVE vulnerabilities found in Windows Server 2008 R2 Service Pack 1, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of Common Weakness Enumeration (CWE) vulnerability data specifically related to the Microsoft Windows Server 2008 R2 Service Pack 1 operating system. It serves as a centralized resource for security professionals, system administrators, and researchers who need to assess the risk posture of this legacy enterprise platform. The content within this repository collects a wide variety of vulnerability types, including remote code execution flaws, privilege escalation bugs, denial-of-service conditions, and information disclosure issues that have been identified in the product. The time range covered extends from the initial release of Service Pack 1 through to the end of its extended support lifecycle, capturing the full historical spectrum of security advisories and patches issued by Microsoft during that period. By utilizing this aggregation, users can efficiently track vendor advisories associated with Microsoft for this specific release, allowing for better prioritization of remediation efforts. Furthermore, the page facilitates a deeper understanding of prevalent weakness classes by analyzing patterns across multiple CVEs, helping teams identify systemic code or configuration issues. Users can also look up a product's vulnerability history to audit past security incidents, compare patch cycles, and maintain accurate compliance records. This structured approach ensures that all relevant security data is accessible in one location, supporting informed decision-making regarding system hardening, migration planning, and ongoing maintenance for environments still running this version of Windows Server.

Vendor: Microsoft

CVE IDTitleCVSSSeverityPublished
CVE-2026-20833 Windows Kerberos Information Disclosure Vulnerability CWE-327 5.5 Medium2026-01-13
CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability CWE-284 7.5 High2026-01-13
CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-09-09
CVE-2025-53806 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-53796 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-55225 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54096 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-54095 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-09-09
CVE-2025-53797 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-53798 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-126 6.5 Medium2025-09-09
CVE-2025-50157 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-53719 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53153 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53148 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-53138 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-08-12
CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.0 High2025-08-12
CVE-2025-50156 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-908 5.7 Medium2025-08-12
CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-08-12
CVE-2025-49729 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49681 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability CWE-125 6.5 Medium2025-07-08
CVE-2025-49673 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49669 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-49663 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08
CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CWE-122 8.8 High2025-07-08

All 56 known CVE vulnerabilities affecting Windows Server 2008 R2 Service Pack 1 with full Chinese analysis, references, and POCs where available.