Microsoft Windows Server 2012 vulnerabilities
4,005 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
4,005
CISA KEV
150
actively exploited
Public exploits
332
Exploited in wild
207
Severity breakdown
CRITICAL178HIGH2668MEDIUM1104LOW55
Vulnerabilities
Page 169 of 201
CVE-2026-42968P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-42968 [MEDIUM] CWE-125 CVE-2026-42968: Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50394P4MEDIUMCVSS 5.5vr22026-07-14
CVE-2026-50394 [MEDIUM] CWE-200 CVE-2026-50394: Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50334P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50334 [MEDIUM] CWE-200 CVE-2026-50334: Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authori
Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.
nvd
CVE-2026-33842P4MEDIUMCVSS 5.5vr22026-07-14
CVE-2026-33842 [MEDIUM] CWE-200 CVE-2026-33842: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50456P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50456 [MEDIUM] CWE-200 CVE-2026-50456: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32084P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32084 [MEDIUM] CWE-200 CVE-2026-32084: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2025-21247P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.253682025-03-11
CVE-2025-21247 [MEDIUM] CWE-41 CVE-2025-21247: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-24080P4MEDIUMCVSS 6.5≥ 6.2.0, < publication2021-02-25
CVE-2021-24080 [MEDIUM] CVE-2021-24080: Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
nvd
CVE-2026-21249P4LOWCVSS 3.3vr22026-02-10
CVE-2026-21249 [LOW] CWE-73 CVE-2026-21249: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2019-0690P4MEDIUMCVSS 6.8vr22019-04-09
CVE-2019-0690 [MEDIUM] CWE-20 CVE-2019-0690: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fail
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.
nvd
CVE-2017-0174P4MEDIUMCVSS 6.5vr22017-08-08
CVE-2017-0174 [MEDIUM] CVE-2017-0174: Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 20
Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS Denial of Service Vulnerability".
nvd
CVE-2015-2371P4MEDIUMCVSS 6.9vr22015-07-14
CVE-2015-2371 [MEDIUM] CWE-264 CVE-2015-2371: The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Wi
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action script associated with a .msi package, aka "Windows Installer
nvd
CVE-2016-3232P4MEDIUMCVSS 5.0vr22016-06-16
CVE-2016-3232 [MEDIUM] CWE-200 CVE-2016-3232: The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows
The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."
nvd
CVE-2019-0635P4MEDIUMCVSS 6.2vr22019-03-05
CVE-2019-0635 [MEDIUM] CWE-20 CVE-2019-0635: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
nvd
CVE-2023-38254P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-38254 [MEDIUM] CWE-20 CVE-2023-38254: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2018-8434P4MEDIUMCVSS 5.4vr2v(Server Core installation)2018-09-13
CVE-2018-8434 [MEDIUM] CWE-20 CVE-2018-8434: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Wind
nvd
CVE-2025-21272P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.252732025-01-14
CVE-2025-21272 [MEDIUM] CWE-908 CVE-2025-21272: Windows COM Server Information Disclosure Vulnerability
Windows COM Server Information Disclosure Vulnerability
nvd
CVE-2025-21288P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.252732025-01-14
CVE-2025-21288 [MEDIUM] CWE-908 CVE-2025-21288: Windows COM Server Information Disclosure Vulnerability
Windows COM Server Information Disclosure Vulnerability
nvd
CVE-2018-8565P4MEDIUMCVSS 5.5vr2v(Server Core installation)2018-11-14
CVE-2018-8565 [MEDIUM] CWE-200 CVE-2018-8565: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Ser
nvd
CVE-2017-0192P4MEDIUMCVSS 4.3vr22017-04-12
CVE-2017-0192 [MEDIUM] CWE-200 CVE-2017-0192: The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 S
The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka "ATMFD.
nvd