Microsoft Windows 2003 Server vulnerabilities

404 CVEs affecting Microsoft Windows 2003 Server, 4 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2417, published 2015-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability, published 2009-07-07. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-02-17. EPSS: 76.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in…
CVE-2015-1701: Microsoft Win32k Privilege Escalation Vulnerability, published 2015-04-21. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 55.9% chance of exploitation in the next 30 days. Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in…
CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability, published 2009-05-29. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-05-20. EPSS: 51.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003…
CVE-2013-5065: Microsoft Windows Kernel Privilege Escalation Vulnerability, published 2013-11-28. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 34.7% chance of exploitation in the next 30 days. NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
CVE-2003-0352, published 2003-08-18. High severity, CVSS 7.5. EPSS: 98.5% chance of exploitation in the next 30 days. Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by…
CVE-2010-0483, published 2010-03-03. High severity, CVSS 7.6. EPSS: 86.6% chance of exploitation in the next 30 days. vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute…
CVE-2005-4560, published 2005-12-28. High severity, CVSS 7.5. EPSS: 86.1% chance of exploitation in the next 30 days. The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC…
CVE-2003-0533, published 2004-06-01. High severity, CVSS 7.5. EPSS: 85.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through…
CVE-2006-3439, published 2006-08-09. High severity, CVSS 10.0. EPSS: 85% chance of exploitation in the next 30 days. Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted…
CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…

Latest

CVE-2015-2417, published 2015-07-14. Medium severity, CVSS 5.0. EPSS: 10.2% chance of exploitation in the next 30 days. OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1…
CVE-2015-2416, published 2015-07-14. Medium severity, CVSS 5.0. EPSS: 10.2% chance of exploitation in the next 30 days. OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1…
CVE-2015-2371, published 2015-07-14. Medium severity, CVSS 6.9. EPSS: 1.5% chance of exploitation in the next 30 days. The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold…
CVE-2015-2370, published 2015-07-14. High severity, CVSS 7.2. EPSS: 4% chance of exploitation in the next 30 days. The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,…
CVE-2015-2367, published 2015-07-14. Low severity, CVSS 2.1. EPSS: 3.1% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-2365, published 2015-07-14. High severity, CVSS 7.2. EPSS: 3.5% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-2364, published 2015-07-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2,…
CVE-2015-2363, published 2015-07-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-2374, published 2015-07-14. Low severity, CVSS 3.3. EPSS: 5% chance of exploitation in the next 30 days. The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller…
CVE-2015-2369, published 2015-07-14. Medium severity, CVSS 6.9. EPSS: 10% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users…