Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,228

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

SortPage 104 of 262

CVE-2023-35386P3HIGHCVSS 7.8vr22023-08-08

CVE-2023-35386 [HIGH] CWE-125 CVE-2023-35386: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2023-21557P3CRITICALCVSS 9.1vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10

CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

nvd

CVE-2022-35756P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.238172023-05-31

CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2026-69347P3HIGHCVSS 7.4vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-69347 [HIGH] CWE-122 CVE-2026-69347: Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

nvd

CVE-2024-38085P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2014-6317P3HIGHCVSS 7.1vr22014-11-11

CVE-2014-6317 [HIGH] CWE-129 CVE-2014-6317: Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Win Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font, aka "Denial

nvd

CVE-2024-20653P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09

CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability Microsoft Common Log File System Elevation of Privilege Vulnerability

nvd

CVE-2020-0909P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < publication2020-05-21

CVE-2020-0909 [HIGH] CVE-2020-0909: A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle s A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle

nvd

CVE-2024-38258P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.250732024-09-10

CVE-2024-38258 [HIGH] CWE-23 CVE-2024-38258: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

nvd

CVE-2019-1424P3HIGHCVSS 8.1vr22019-11-12

CVE-2019-1424 [HIGH] CVE-2019-1424: A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure com A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'.

nvd

CVE-2023-38144P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.244622023-09-12

CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2024-38141P3HIGHCVSS 7.8fixed in 6.2.9200.25031vr2+1 more2024-08-13

CVE-2024-38141 [HIGH] CWE-416 CVE-2024-38141: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

nvd

CVE-2023-38143P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.244622023-09-12

CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2025-21420P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.253172025-02-11

CVE-2025-21420 [HIGH] CWE-59 CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

nvd

CVE-2024-43560P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.251182024-10-08

CVE-2024-43560 [HIGH] CWE-122 CVE-2024-43560: Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

nvd

CVE-2022-37966P3HIGHCVSS 8.1vr2v-2022-11-09

CVE-2022-37966 [HIGH] CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

nvd

CVE-2017-8588P3HIGHCVSS 7.0vr22017-07-11

CVE-2017-8588 [HIGH] CVE-2017-8588: Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability".

nvd

CVE-2017-0016P3MEDIUMCVSS 5.9vr22017-03-17

CVE-2017-0016 [MEDIUM] CWE-476 CVE-2017-0016: Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka "SMBv2/SMBv3 Null Dereference Denial of Service

nvd

CVE-2022-33647P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-33647 [HIGH] CVE-2022-33647: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2025-49687P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08

CVE-2025-49687 [HIGH] CWE-125 CVE-2025-49687: Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate p Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

nvd

← Previous104 / 262Next →