Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 186 of 262
CVE-2026-68833P3MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68833 [MEDIUM] CWE-122 CVE-2026-68833: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a ph
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
nvd
CVE-2026-69566P3MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69566 [MEDIUM] CWE-122 CVE-2026-69566: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a ph
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
nvd
CVE-2026-71349P3MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-71349 [MEDIUM] CWE-122 CVE-2026-71349: Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
nvd
CVE-2017-8532P3MEDIUMCVSS 6.5vr22017-06-15
CVE-2017-8532 [MEDIUM] CVE-2017-8532: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0
nvd
CVE-2022-21883P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21883 [HIGH] CVE-2022-21883: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2026-69839P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69839 [MEDIUM] CWE-248 CVE-2026-69839: Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service ove
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
nvd
CVE-2026-72939P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72939 [MEDIUM] CWE-476 CVE-2026-72939: Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized at
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-61345P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-61345 [MEDIUM] CWE-476 CVE-2026-61345: Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
nvd
CVE-2026-59138P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-59138 [MEDIUM] CWE-476 CVE-2026-59138: Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
nvd
CVE-2026-49799P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-49799 [MEDIUM] CWE-400 CVE-2026-49799: Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allo
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-59185P3MEDIUMCVSS 6.5vr22025-10-14
CVE-2025-59185 [MEDIUM] CWE-73 CVE-2025-59185: External control of file name or path in Windows Core Shell allows an unauthorized attacker to perfo
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-69940P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69940 [MEDIUM] CWE-125 CVE-2026-69940: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-70244P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70244 [MEDIUM] CWE-125 CVE-2026-70244: Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-88122P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-88122 [MEDIUM] CWE-125 CVE-2026-88122: Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-69955P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69955 [MEDIUM] CWE-125 CVE-2026-69955: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2023-35351P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35351 [MEDIUM] CWE-416 CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
nvd
CVE-2023-35346P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35346 [MEDIUM] CWE-591 CVE-2023-35346: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-35345P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35345 [MEDIUM] CWE-591 CVE-2023-35345: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-35344P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35344 [MEDIUM] CWE-591 CVE-2023-35344: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-35310P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35310 [MEDIUM] CWE-591 CVE-2023-35310: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd