Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,228

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

SortPage 182 of 262

CVE-2014-1811P3MEDIUMCVSS 5.0vr22014-06-11

CVE-2014-1811 [MEDIUM] CWE-399 CVE-2014-1811: The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (non-paged pool memory consumption and system hang) via malformed data in the Options field of a TCP header,

nvd

CVE-2026-70126P3HIGHCVSS 7.1vr22026-10-13

CVE-2026-70126 [HIGH] CWE-20 CVE-2026-70126: Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

nvd

CVE-2017-8592P3MEDIUMCVSS 6.5vr22017-07-11

CVE-2017-8592 [MEDIUM] CWE-200 CVE-2017-8592: Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka "Microsoft Browser Security Feature Bypass".

nvd

CVE-2017-8533P3MEDIUMCVSS 6.5vr22017-06-15

CVE-2017-8533 [MEDIUM] CVE-2017-8533: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0

nvd

CVE-2023-24940P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09

CVE-2023-24940 [HIGH] CWE-476 CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

nvd

CVE-2013-3869P4MEDIUMCVSS 5.0vr22013-11-13

CVE-2013-3869 [MEDIUM] CWE-20 CVE-2013-3869: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to cause a denial of service (daemon hang) via a web-service request containing a crafted X.509 certificate that is n

nvd

CVE-2026-83785P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83785 [HIGH] CWE-416 CVE-2026-83785: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53134P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-53134 [HIGH] CWE-200 CVE-2025-53134: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83575P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83575 [HIGH] CWE-416 CVE-2026-83575: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83564P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83564 [HIGH] CWE-416 CVE-2026-83564: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69387P3HIGHCVSS 7.0vr22026-10-13

CVE-2026-69387 [HIGH] CWE-416 CVE-2026-69387: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83574P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83574 [HIGH] CWE-416 CVE-2026-83574: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-55678P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14

CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-70156P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-70156 [HIGH] CWE-416 CVE-2026-70156: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20869P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13

CVE-2026-20869 [HIGH] CWE-362 CVE-2026-20869: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59259P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14

CVE-2025-59259 [MEDIUM] CWE-1287 CVE-2025-59259: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

nvd

CVE-2026-85355P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-85355 [HIGH] CWE-829 CVE-2026-85355: Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-70150P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-70150 [HIGH] CWE-416 CVE-2026-70150: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-70136P3HIGHCVSS 7.0vr22026-10-13

CVE-2026-70136 [HIGH] CWE-416 CVE-2026-70136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83689P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83689 [HIGH] CWE-416 CVE-2026-83689: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

nvd

← Previous182 / 262Next →