The most vulnerable part of a server is the fact that it's a server. It's a lot easier to attack the website running on the server and escalate from there then

The most vulnerable part of a server is the fact that it's a server. It's a lot easier to attack the website running on the server and escalate from there then attack the OS directly. So the vulnerability would have to be in something that both servers and desktops have in common.