Microsoft Windows Server 2012 vulnerabilities
5,214 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,214
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL251HIGH3492MEDIUM1416LOW55
Vulnerabilities
Page 10 of 261
CVE-2020-16896P1HIGHCVSS 7.5ExploitedRansomwarevr22020-10-16
CVE-2020-16896 [HIGH] CVE-2020-16896: <p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker
An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would need to run a
nvd
CVE-2019-0630P1HIGHCVSS 8.8Exploitedvr22019-03-05
CVE-2019-0630 [HIGH] CWE-19 CVE-2019-0630: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
nvd
CVE-2021-43207P1HIGHCVSS 7.8ExploitedRansomwarevr2≥ 6.2.0, < 6.2.9200.23545+1 more2021-12-15
CVE-2021-43207 [HIGH] CVE-2021-43207: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-0611P1HIGHCVSS 7.5ExploitedRansomwarevr22020-01-14
CVE-2020-0611 [HIGH] CVE-2020-0611: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connec
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
nvd
CVE-2022-35803P2HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13
CVE-2022-35803 [HIGH] CVE-2022-35803: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2019-0633P2HIGHCVSS 8.8Exploitedvr22019-03-05
CVE-2019-0633 [HIGH] CVE-2019-0633: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.
nvd
CVE-2019-1108P1MEDIUMCVSS 6.5ExploitedRansomwarevr22019-07-15
CVE-2019-1108 [MEDIUM] CWE-200 CVE-2019-1108: An information disclosure vulnerability exists when the Windows RDP client improperly discloses the
An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'.
nvd
CVE-2026-25187P1HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10
CVE-2026-25187 [HIGH] CWE-59 CVE-2026-25187: Improper link resolution before file access ('link following') in Winlogon allows an authorized atta
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45586P2HIGHCVSS 7.8Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45586 [HIGH] CWE-59 CVE-2026-45586: Improper link resolution before file access ('link following') in Windows Collaborative Translation
Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38196P2HIGHCVSS 7.8Exploitedfixed in 6.2.9200.25031vr2+1 more2024-08-13
CVE-2024-38196 [HIGH] CWE-20 CVE-2024-38196: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-20931P2HIGHCVSS 8.0Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20931 [HIGH] CWE-73 CVE-2026-20931: External control of file name or path in Windows Telephony Service allows an authorized attacker to
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2023-21554P1CRITICALCVSS 9.8PoCvr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-21554 [CRITICAL] CWE-20 CVE-2023-21554: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2022-30170P2HIGHCVSS 7.3Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13
CVE-2022-30170 [HIGH] CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability
Windows Credential Roaming Service Elevation of Privilege Vulnerability
nvd
CVE-2023-29324P2MEDIUMCVSS 6.5Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09
CVE-2023-29324 [MEDIUM] CWE-73 CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2023-28218P2HIGHCVSS 7.0Exploitedvr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2020-1013P2HIGHCVSS 8.1Exploitedvr2≥ 6.2.0, < publication2020-09-11
CVE-2020-1013 [HIGH] CVE-2020-1013: <p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy upda
An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.
To exploit this vulnerability, an attacker would need to launch a man-in-the-middle (MiTM) attack ag
nvd
CVE-2018-8641P2HIGHCVSS 7.8Exploitedvr22018-12-12
CVE-2018-8641 [HIGH] CVE-2018-8641: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server
nvd
CVE-2014-0266P2HIGHCVSS 7.1Exploitedvr22014-02-12
CVE-2014-0266 [HIGH] CWE-200 CVE-2014-0266: The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows S
The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visit
nvd
CVE-2024-38063P1CRITICALCVSS 9.8PoCfixed in 6.2.9200.25031vr2+1 more2024-08-13
CVE-2024-38063 [CRITICAL] CWE-191 CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2015-1637P2MEDIUMCVSS 4.3Exploitedvr22015-03-06
CVE-2015-1637 [MEDIUM] CVE-2015-1637: Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Serve
Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT
nvd