Microsoft Windows Server 2003 vulnerabilities

455 CVEs affecting Microsoft Windows Server 2003, 17 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5364, published 2020-02-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability, published 2008-10-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-05-20. EPSS: 98.8% chance of exploitation in the next 30 days. The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a…
CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability, published 2014-11-11. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 94.9% chance of exploitation in the next 30 days. OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT…
CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability, published 2010-07-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-09-15. EPSS: 91.3% chance of exploitation in the next 30 days. Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)…
CVE-2012-0151: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability, published 2012-04-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 87.7% chance of exploitation in the next 30 days. The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and…
CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability, published 2014-11-18. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 87.3% chance of exploitation in the next 30 days. The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012…
CVE-2014-4113: Microsoft Win32k Privilege Escalation Vulnerability, published 2014-10-15. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-04. EPSS: 86.9% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…
CVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerability, published 2011-11-04. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-10-06. EPSS: 78.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server…
CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability, published 2013-11-12. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-10-06. EPSS: 73.7% chance of exploitation in the next 30 days. The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
CVE-2014-4148: Microsoft Windows Remote Code Execution Vulnerability, published 2014-10-15. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 59.9% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…
CVE-2014-4077: Microsoft IME Japanese Privilege Escalation Vulnerability, published 2014-11-11. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 54.6% chance of exploitation in the next 30 days. Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote…

Latest

CVE-2012-5364, published 2020-02-20. High severity, CVSS 7.5. EPSS: 14.5% chance of exploitation in the next 30 days. The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.
CVE-2012-5362, published 2020-02-20. High severity, CVSS 7.5. EPSS: 14.5% chance of exploitation in the next 30 days. The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than…
CVE-2017-0176, published 2017-06-22. High severity, CVSS 8.1. EPSS: 45.8% chance of exploitation in the next 30 days. A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target…
CVE-2017-8487, published 2017-06-15. High severity, CVSS 7.8. EPSS: 54.1% chance of exploitation in the next 30 days. Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution…
CVE-2017-8461, published 2017-06-15. High severity, CVSS 7.8. EPSS: 20.4% chance of exploitation in the next 30 days. Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a…
CVE-2015-2387: Microsoft ATM Font Driver Privilege Escalation Vulnerability, published 2015-07-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 34.9% chance of exploitation in the next 30 days. ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012…
CVE-2015-2360: Microsoft Win32k Privilege Escalation Vulnerability, published 2015-06-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 14.8% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-1768, published 2015-06-10. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application,…
CVE-2015-1727, published 2015-06-10. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
CVE-2015-1726, published 2015-06-10. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,…