Microsoft Windows Server 2012 vulnerabilities
4,005 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
4,005
CISA KEV
150
actively exploited
Public exploits
332
Exploited in wild
207
Severity breakdown
CRITICAL178HIGH2668MEDIUM1104LOW55
Vulnerabilities
Page 188 of 201
CVE-2016-3287P4MEDIUMCVSS 4.4vr22016-07-13
CVE-2016-3287 [MEDIUM] CWE-254 CVE-2016-3287: Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure Boot protection mechanism by leveraging administrative access to install a crafted policy, aka "Secure Boot Security Feature Bypass."
nvd
CVE-2024-30071P4MEDIUMCVSS 4.7vr22024-07-09
CVE-2024-30071 [MEDIUM] CWE-126 CVE-2024-30071: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2023-36722P4MEDIUMCVSS 4.4vr2≥ 6.2.9200.0, < 6.2.9200.245232023-10-10
CVE-2023-36722 [MEDIUM] CWE-284 CVE-2023-36722: Active Directory Domain Services Information Disclosure Vulnerability
Active Directory Domain Services Information Disclosure Vulnerability
nvd
CVE-2020-1194P4MEDIUMCVSS 5.5vr22020-06-09
CVE-2020-1194 [MEDIUM] CVE-2020-1194: A denial of service vulnerability exists when Windows Registry improperly handles filesystem operati
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.
nvd
CVE-2022-22002P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236052022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability
Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2025-21274P4MEDIUMCVSS 5.5vr22025-01-14
CVE-2025-21274 [MEDIUM] CWE-59 CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2013-3903P4MEDIUMCVSS 4.7vr22013-12-11
CVE-2013-3903 [MEDIUM] CWE-20 CVE-2013-3903: Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 20
Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service (reboot) via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."
nvd
CVE-2019-0839P4MEDIUMCVSS 4.4vr22019-04-09
CVE-2019-0839 [MEDIUM] CVE-2019-0839: An information disclosure vulnerability exists when the Terminal Services component improperly discl
An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.
nvd
CVE-2019-0775P4MEDIUMCVSS 4.7vr22019-04-09
CVE-2019-0775 [MEDIUM] CVE-2019-0775: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0782.
nvd
CVE-2017-0159P4LOWCVSS 3.7vr22017-04-12
CVE-2017-0159 [LOW] CVE-2017-0159: A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windo
A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."
nvd
CVE-2021-27094P4MEDIUMCVSS 4.4vr2≥ 6.2.0, < publication2021-04-13
CVE-2021-27094 [MEDIUM] CVE-2021-27094: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
nvd
CVE-2023-28276P4MEDIUMCVSS 4.4vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28276 [MEDIUM] CVE-2023-28276: Windows Group Policy Security Feature Bypass Vulnerability
Windows Group Policy Security Feature Bypass Vulnerability
nvd
CVE-2026-20936P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20936 [MEDIUM] CWE-125 CVE-2026-20936: Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a phys
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2020-1076P4MEDIUMCVSS 5.5vr22020-05-21
CVE-2020-1076 [MEDIUM] CVE-2020-1076: A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Win
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
nvd
CVE-2023-24862P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24862 [MEDIUM] CWE-125 CVE-2023-24862: Windows Secure Channel Denial of Service Vulnerability
Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2024-35270P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-35270 [MEDIUM] CWE-400 CVE-2024-35270: Windows iSCSI Service Denial of Service Vulnerability
Windows iSCSI Service Denial of Service Vulnerability
nvd
CVE-2022-37981P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11
CVE-2022-37981 [MEDIUM] CVE-2022-37981: Windows Event Logging Service Denial of Service Vulnerability
Windows Event Logging Service Denial of Service Vulnerability
nvd
CVE-2021-38631P4MEDIUMCVSS 4.4vr2≥ 6.2.0, < 6.2.9200.235172021-11-10
CVE-2021-38631 [MEDIUM] CVE-2021-38631: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2021-41371P4MEDIUMCVSS 4.4vr2≥ 6.2.0, < 6.2.9200.235172021-11-10
CVE-2021-41371 [MEDIUM] CVE-2021-41371: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2023-24911P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24911 [MEDIUM] CWE-191 CVE-2023-24911: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd