cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 117 of 262
CVE-2026-83837P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83837 [HIGH] CWE-441 CVE-2026-83837: Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85796P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85796 [HIGH] CWE-121 CVE-2026-85796: Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88182P3HIGHCVSS 7.8vr22026-10-13
CVE-2026-88182 [HIGH] CWE-416 CVE-2026-88182: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85829P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85829 [HIGH] CWE-415 CVE-2026-85829: Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96928P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96928 [HIGH] CWE-125 CVE-2026-96928: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96867P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-96862P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96862 [HIGH] CWE-125 CVE-2026-96862: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59187P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40409P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-45592P3HIGHCVSS 7.8vr22026-06-09
CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85321P3HIGHCVSS 7.5vr22026-10-13
CVE-2026-85321 [HIGH] CWE-770 CVE-2026-85321: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50491P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59278P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59275P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33834P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-29831P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.254752025-05-13
CVE-2025-29831 [HIGH] CWE-416 CVE-2025-29831: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-61349P3HIGHCVSS 7.8vr22026-08-11
CVE-2026-61349 [HIGH] CWE-362 CVE-2026-61349: Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26183P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26183 [HIGH] CWE-284 CVE-2026-26183: Improper access control in Windows RPC API allows an authorized attacker to elevate privileges local Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69650P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69650 [HIGH] CWE-347 CVE-2026-69650: Improper verification of cryptographic signature in Windows Key Distribution Center allows an author Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34338P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
← Previous117 / 262Next →
Microsoft Windows Server 2012 vulnerabilities | cvebase