cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 146 of 262
CVE-2021-41345P3HIGHCVSS 7.8vr2≥ 6.2.0, < 6.2.9200.234902021-10-13
CVE-2021-41345 [HIGH] CWE-269 CVE-2021-41345: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2025-27741P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-27741 [HIGH] CWE-125 CVE-2025-27741: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2020-1538P3HIGHCVSS 7.8vr2≥ 6.2.0, < publication2020-08-17
CVE-2020-1538 [HIGH] CVE-2020-1538: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Wind
nvd
CVE-2020-1517P3HIGHCVSS 7.8vr2≥ 6.2.0, < publication2020-08-17
CVE-2020-1517 [HIGH] CVE-2020-1517: An elevation of privilege vulnerability exists when the Windows File Server Resource Management Serv An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by
nvd
CVE-2020-1488P3HIGHCVSS 7.8vr2≥ 6.2.0, < publication2020-08-17
CVE-2020-1488 [HIGH] CWE-269 CVE-2020-1488: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperl An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges. The security update addresses the vulnerability by corr
nvd
CVE-2023-21817P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21817 [HIGH] CWE-287 CVE-2023-21817: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2025-27483P3HIGHCVSS 7.8vr22025-04-08
CVE-2025-27483 [HIGH] CWE-125 CVE-2025-27483: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21822P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21822 [HIGH] CWE-416 CVE-2023-21822: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2020-0844P3HIGHCVSS 7.8vr22020-03-12
CVE-2020-0844 [HIGH] CVE-2020-0844: An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
nvd
CVE-2025-27733P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-27733 [HIGH] CWE-125 CVE-2025-27733: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21805P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2023-29367P3HIGHCVSS 7.8vr22023-06-14
CVE-2023-29367 [HIGH] CWE-908 CVE-2023-29367: iSCSI Target WMI Provider Remote Code Execution Vulnerability iSCSI Target WMI Provider Remote Code Execution Vulnerability
nvd
CVE-2021-26426P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.234352021-08-12
CVE-2021-26426 [HIGH] CWE-59 CVE-2021-26426: Windows User Account Profile Picture Elevation of Privilege Vulnerability Windows User Account Profile Picture Elevation of Privilege Vulnerability
nvd
CVE-2023-21691P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21691 [HIGH] CWE-125 CVE-2023-21691: Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
nvd
CVE-2022-37997P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11
CVE-2022-37997 [HIGH] CVE-2022-37997: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-36705P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.245692023-11-14
CVE-2023-36705 [HIGH] CWE-59 CVE-2023-36705: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2022-37993P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11
CVE-2022-37993 [HIGH] CVE-2022-37993: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-37994P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11
CVE-2022-37994 [HIGH] CVE-2022-37994: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-37999P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11
CVE-2022-37999 [HIGH] CVE-2022-37999: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2021-40443P3HIGHCVSS 7.8vr2≥ 6.2.0, < 6.2.9200.234902021-10-13
CVE-2021-40443 [HIGH] CWE-269 CVE-2021-40443: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
Microsoft Windows Server 2012 vulnerabilities | cvebase