Skip to content
COOEY

EXPOSURES › CVE-2008-4250

CVE-2008-4250

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-05-20 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2008-4250 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 45/100 rceexploited-in-wildunpatched

Microsoft Windows Server Service buffer overflow vulnerability (CVE-2008-4250) enabled remote code execution via crafted RPC requests.

This 2008 vulnerability allowed remote attackers to execute arbitrary code through a crafted RPC request targeting path canonicalization in the Windows Server Service. As a KEV entry actively exploited in the wild, it represents a critical supply-chain risk for DIB organizations relying on Windows infrastructure, requiring immediate patching and network segmentation to prevent unauthorized access.

Shame score — While the vulnerability was actively exploited, it was disclosed and patched relatively quickly compared to some other high-profile failures.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized