cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 160 of 262
CVE-2021-41366P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.235172021-11-10
CVE-2021-41366 [HIGH] CWE-269 CVE-2021-41366: Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
nvd
CVE-2023-32053P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32053 [HIGH] CWE-59 CVE-2023-32053: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-21765P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21765 [HIGH] CWE-190 CVE-2023-21765: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2023-21558P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21558 [HIGH] CWE-20 CVE-2023-21558: Windows Error Reporting Service Elevation of Privilege Vulnerability Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2023-21767P3HIGHCVSS 7.8vr22023-01-10
CVE-2023-21767 [HIGH] CWE-20 CVE-2023-21767: Windows Overlay Filter Elevation of Privilege Vulnerability Windows Overlay Filter Elevation of Privilege Vulnerability
nvd
CVE-2022-34706P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.238172022-08-09
CVE-2022-34706 [HIGH] CWE-269 CVE-2022-34706: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
nvd
CVE-2023-21561P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21561 [HIGH] CWE-190 CVE-2023-21561: Microsoft Cryptographic Services Elevation of Privilege Vulnerability Microsoft Cryptographic Services Elevation of Privilege Vulnerability
nvd
CVE-2023-21756P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-21756 [HIGH] CWE-416 CVE-2023-21756: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2023-21804P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21804 [HIGH] CWE-122 CVE-2023-21804: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-21524P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21524 [HIGH] CWE-798 CVE-2023-21524: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
nvd
CVE-2023-24910P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24910 [HIGH] CWE-476 CVE-2023-24910: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-23412P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-23412 [HIGH] CWE-269 CVE-2023-23412: Windows Accounts Picture Elevation of Privilege Vulnerability Windows Accounts Picture Elevation of Privilege Vulnerability
nvd
CVE-2023-35362P3HIGHCVSS 7.8vr22023-07-11
CVE-2023-35362 [HIGH] CWE-591 CVE-2023-35362: Windows Clip Service Elevation of Privilege Vulnerability Windows Clip Service Elevation of Privilege Vulnerability
nvd
CVE-2023-35340P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35340 [HIGH] CWE-591 CVE-2023-35340: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
nvd
CVE-2017-0055P3MEDIUMCVSS 6.1vr22017-03-17
CVE-2017-0055 [MEDIUM] CWE-79 CVE-2017-0055: Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Wi Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, a
nvd
CVE-2021-27063P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.232982021-03-11
CVE-2021-27063 [HIGH] CVE-2021-27063: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2025-60719P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257682025-11-11
CVE-2025-60719 [HIGH] CWE-822 CVE-2025-60719: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2015-1676P4LOWCVSS 2.1PoCvr22015-05-13
CVE-2015-1676 [LOW] CWE-200 CVE-2015-1676: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vuln
nvd
CVE-2015-1679P4LOWCVSS 2.1PoCvr22015-05-13
CVE-2015-1679 [LOW] CVE-2015-1679: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerabilit
nvd
CVE-2015-1680P4LOWCVSS 2.1PoCvr22015-05-13
CVE-2015-1680 [LOW] CVE-2015-1680: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerabilit
nvd
Microsoft Windows Server 2012 vulnerabilities | cvebase