Microsoft Windows Server 2012 vulnerabilities

4,005 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

4,005

CISA KEV

150

actively exploited

Public exploits

332

Exploited in wild

207

Severity breakdown

CRITICAL178HIGH2668MEDIUM1104LOW55

Vulnerabilities

SortPage 10 of 201

CVE-2020-0611P1HIGHCVSS 7.5ExploitedRansomwarevr22020-01-14

CVE-2020-0611 [HIGH] CVE-2020-0611: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connec A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

nvd

CVE-2022-35803P2HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-35803 [HIGH] CVE-2022-35803: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2019-0633P1HIGHCVSS 8.8Exploitedvr22019-03-05

CVE-2019-0633 [HIGH] CVE-2019-0633: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.

nvd

CVE-2019-1108P1MEDIUMCVSS 6.5ExploitedRansomwarevr22019-07-15

CVE-2019-1108 [MEDIUM] CWE-200 CVE-2019-1108: An information disclosure vulnerability exists when the Windows RDP client improperly discloses the An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'.

nvd

CVE-2026-25187P1HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10

CVE-2026-25187 [HIGH] CWE-59 CVE-2026-25187: Improper link resolution before file access ('link following') in Winlogon allows an authorized atta Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45586P2HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09

CVE-2026-45586 [HIGH] CWE-59 CVE-2026-45586: Improper link resolution before file access ('link following') in Windows Collaborative Translation Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-38196P2HIGHCVSS 7.8Exploitedfixed in 6.2.9200.25031vr2+1 more2024-08-13

CVE-2024-38196 [HIGH] CWE-20 CVE-2024-38196: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-21554P1CRITICALCVSS 9.8PoCvr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11

CVE-2023-21554 [CRITICAL] CWE-20 CVE-2023-21554: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

nvd

CVE-2026-20931P2HIGHCVSS 8.0Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13

CVE-2026-20931 [HIGH] CWE-73 CVE-2026-20931: External control of file name or path in Windows Telephony Service allows an authorized attacker to External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.

nvd

CVE-2023-29324P2MEDIUMCVSS 6.5Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09

CVE-2023-29324 [MEDIUM] CWE-73 CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability Windows MSHTML Platform Security Feature Bypass Vulnerability

nvd

CVE-2023-28218P2HIGHCVSS 7.0Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11

CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

nvd

CVE-2018-8514P2MEDIUMCVSS 5.5Exploitedvr2v(Server Core installation)2018-12-12

CVE-2018-8514 [MEDIUM] CWE-665 CVE-2018-8514: An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initial An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server

nvd

CVE-2018-8641P2HIGHCVSS 7.8Exploitedvr22018-12-12

CVE-2018-8641 [HIGH] CVE-2018-8641: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server

nvd

CVE-2022-30170P2HIGHCVSS 7.3Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-30170 [HIGH] CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability Windows Credential Roaming Service Elevation of Privilege Vulnerability

nvd

CVE-2014-0266P2HIGHCVSS 7.1Exploitedvr22014-02-12

CVE-2014-0266 [HIGH] CWE-200 CVE-2014-0266: The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows S The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visit

nvd

CVE-2024-38063P1CRITICALCVSS 9.8PoCfixed in 6.2.9200.25031vr2+1 more2024-08-13

CVE-2024-38063 [CRITICAL] CWE-191 CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability

nvd

CVE-2018-8596P2MEDIUMCVSS 6.5Exploitedvr22018-12-12

CVE-2018-8596 [MEDIUM] CVE-2018-8596: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20

nvd

CVE-2018-8595P2MEDIUMCVSS 6.5Exploitedvr2v(Server Core installation)2018-12-12

CVE-2018-8595 [MEDIUM] CVE-2018-8595: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20

nvd

CVE-2018-8622P2MEDIUMCVSS 5.5Exploitedvr22018-12-12

CVE-2018-8622 [MEDIUM] CVE-2018-8622: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018

nvd

CVE-2018-8477P2MEDIUMCVSS 5.5Exploitedvr2v(Server Core installation)2018-12-12

CVE-2018-8477 [MEDIUM] CVE-2018-8477: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows

nvd

← Previous10 / 201Next →