CVE-2008-4268: Microsoft Windows Server 2008

High severity, CVSS 8.5. EPSS: 20.7% chance of exploitation in the next 30 days.

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."

Affected products

• Microsoft Windows Server 2008: any version
• Microsoft Windows Vista: any version

Published 2008-12-10. Last modified 2026-06-16.