Microsoft Windows Server 2012 vulnerabilities
4,005 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
4,005
CISA KEV
150
actively exploited
Public exploits
332
Exploited in wild
207
Severity breakdown
CRITICAL178HIGH2668MEDIUM1104LOW55
Vulnerabilities
Page 131 of 201
CVE-2026-27922P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27922 [HIGH] CWE-416 CVE-2026-27922: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26182P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26182 [HIGH] CWE-416 CVE-2026-26182: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50371P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50371 [HIGH] CWE-362 CVE-2026-50371: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45601P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45601 [HIGH] CWE-362 CVE-2026-45601: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45596P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45596 [HIGH] CWE-362 CVE-2026-45596: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45598P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45598 [HIGH] CWE-362 CVE-2026-45598: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45603P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45603 [HIGH] CWE-362 CVE-2026-45603: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26173P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26173 [HIGH] CWE-362 CVE-2026-26173: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59259P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59259 [MEDIUM] CWE-1287 CVE-2025-59259: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-53798P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53798 [MEDIUM] CWE-126 CVE-2025-53798: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-53806P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53806 [MEDIUM] CWE-125 CVE-2025-53806: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-53797P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53797 [MEDIUM] CWE-126 CVE-2025-53797: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-53796P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53796 [MEDIUM] CWE-126 CVE-2025-53796: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2019-0811P3HIGHCVSS 7.5vr22019-07-15
CVE-2019-0811 [HIGH] CWE-19 CVE-2019-0811: A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS
A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.
nvd
CVE-2025-58739P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58739 [MEDIUM] CWE-200 CVE-2025-58739: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-50366P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50366 [MEDIUM] CWE-476 CVE-2026-50366: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-57976P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-57976 [MEDIUM] CWE-476 CVE-2026-57976: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-55003P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-55003 [MEDIUM] CWE-908 CVE-2026-55003: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58546P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-58546 [MEDIUM] CWE-908 CVE-2026-58546: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2019-0758P3MEDIUMCVSS 6.5vr22019-05-16
CVE-2019-0758 [MEDIUM] CVE-2019-0758: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0882, CVE-2019-0961.
nvd