Microsoft Windows Server 2012 vulnerabilities

4,005 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

4,005

CISA KEV

150

actively exploited

Public exploits

332

Exploited in wild

207

Severity breakdown

CRITICAL178HIGH2668MEDIUM1104LOW55

Vulnerabilities

SortPage 155 of 201

CVE-2023-24861P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14

CVE-2023-24861 [HIGH] CWE-367 CVE-2023-24861: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2024-26252P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26252 [MEDIUM] CWE-822 CVE-2024-26252: Windows rndismp6.sys Remote Code Execution Vulnerability Windows rndismp6.sys Remote Code Execution Vulnerability

nvd

CVE-2024-26253P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26253 [MEDIUM] CWE-20 CVE-2024-26253: Windows rndismp6.sys Remote Code Execution Vulnerability Windows rndismp6.sys Remote Code Execution Vulnerability

nvd

CVE-2023-21694P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14

CVE-2023-21694 [MEDIUM] CWE-122 CVE-2023-21694: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability

nvd

CVE-2025-49743P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-49743 [MEDIUM] CWE-362 CVE-2025-49743: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2020-15706P4MEDIUMCVSS 6.4vr22020-07-29

CVE-2020-15706 [MEDIUM] CWE-362 CVE-2020-15706: GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnera GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 version 2.04 and prior versions.

nvd

CVE-2017-8587P4MEDIUMCVSS 6.5vr22017-07-11

CVE-2017-8587 [MEDIUM] CVE-2017-8587: Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2 Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 allows a denial of service vulnerability when it attempts to open a non-existent file, aka "Windows Explorer Denial of Service Vulnerability".

nvd

CVE-2014-6318P4MEDIUMCVSS 4.3vr22014-11-11

CVE-2014-6318 [MEDIUM] CWE-287 CVE-2014-6318: The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Ser The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid credentials, which makes it easier for remote attackers to byp

nvd

CVE-2025-53148P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-53148 [MEDIUM] CWE-908 CVE-2025-53148: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

nvd

CVE-2025-50157P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-50157 [MEDIUM] CWE-908 CVE-2025-50157: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

nvd

CVE-2025-53138P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-53138 [MEDIUM] CWE-908 CVE-2025-53138: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

nvd

CVE-2025-53153P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-53153 [MEDIUM] CWE-908 CVE-2025-53153: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

nvd

CVE-2016-0089P4HIGHCVSS 7.1vr22016-04-12

CVE-2016-0089 [HIGH] CWE-200 CVE-2016-0089: Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS us Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."

nvd

CVE-2025-29956P4MEDIUMCVSS 5.4vr2≥ 6.2.9200.0, < 6.2.9200.254752025-05-13

CVE-2025-29956 [MEDIUM] CWE-126 CVE-2025-29956: Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-25185P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10

CVE-2026-25185 [MEDIUM] CWE-200 CVE-2026-25185: Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows a Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2025-62567P4MEDIUMCVSS 5.3vr22025-12-09

CVE-2025-62567 [MEDIUM] CWE-191 CVE-2025-62567: Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny serv Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.

nvd

CVE-2015-2550P4HIGHCVSS 7.2vr22015-10-14

CVE-2015-2550 [HIGH] CWE-264 CVE-2015-2550: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

nvd

CVE-2022-29112P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-29112 [MEDIUM] CVE-2022-29112: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

nvd

CVE-2015-0074P4MEDIUMCVSS 4.3vr22015-03-11

CVE-2015-0074 [MEDIUM] CWE-119 CVE-2015-0074: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly allocate memory, which allows remote attackers to cause a denial of service via a crafted (1) web site or (2) file, aka "Ado

nvd

CVE-2021-31186P4MEDIUMCVSS 6.5vr2≥ 6.2.0, < 6.2.9200.233472021-05-11

CVE-2021-31186 [MEDIUM] CVE-2021-31186: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

nvd

← Previous155 / 201Next →