Microsoft Windows Server 2012 vulnerabilities
4,005 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
4,005
CISA KEV
150
actively exploited
Public exploits
332
Exploited in wild
207
Severity breakdown
CRITICAL178HIGH2668MEDIUM1104LOW55
Vulnerabilities
Page 189 of 201
CVE-2025-24055P4MEDIUMCVSS 4.3fixed in 6.2.9200.25368vr2+1 more2025-03-11
CVE-2025-24055 [MEDIUM] CWE-125 CVE-2025-24055: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2022-22710P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236052022-02-09
CVE-2022-22710 [MEDIUM] CVE-2022-22710: Windows Common Log File System Driver Denial of Service Vulnerability
Windows Common Log File System Driver Denial of Service Vulnerability
nvd
CVE-2022-35832P4MEDIUMCVSS 5.5vr22022-09-13
CVE-2022-35832 [MEDIUM] CVE-2022-35832: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2022-21973P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09
CVE-2022-21973 [MEDIUM] CVE-2022-21973: Windows Media Center Update Denial of Service Vulnerability
Windows Media Center Update Denial of Service Vulnerability
nvd
CVE-2021-28443P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-04-13
CVE-2021-28443 [MEDIUM] CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2022-24484P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15
CVE-2022-24484 [MEDIUM] CVE-2022-24484: Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
nvd
CVE-2015-0001P4LOWCVSS 1.9vr22015-01-13
CVE-2015-0001 [LOW] CWE-264 CVE-2015-0001: The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Securi
nvd
CVE-2022-21845P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.237712022-07-12
CVE-2022-21845 [MEDIUM] CVE-2022-21845: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-20691P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20691 [MEDIUM] CWE-125 CVE-2024-20691: Windows Themes Information Disclosure Vulnerability
Windows Themes Information Disclosure Vulnerability
nvd
CVE-2016-7214P4LOWCVSS 3.3vr22016-11-10
CVE-2016-7214 [LOW] CWE-200 CVE-2016-7214: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted application, aka "Win32k Information Disclosure Vulnerabili
nvd
CVE-2025-21298CRITICALCVSS 9.8≥ 6.2.9200.0, < 6.2.9200.252732025-01-14
CVE-2025-21298 [CRITICAL] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2023-29325HIGHCVSS 8.1≥ 6.2.9200.0, < 6.2.9200.242662023-05-09
CVE-2023-29325 [HIGH] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2024-21340P4MEDIUMCVSS 4.6vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21340 [MEDIUM] CWE-126 CVE-2024-21340: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2016-0175P4LOWCVSS 3.3vr22016-05-11
CVE-2016-0175 [LOW] CWE-200 CVE-2016-0175: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted applicat
nvd
CVE-2025-29839P4MEDIUMCVSS 4.0vr2≥ 6.2.9200.0, < 6.2.9200.254752025-05-13
CVE-2025-29839 [MEDIUM] CWE-125 CVE-2025-29839: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45642P4LOWCVSS 3.9vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45642 [LOW] CWE-20 CVE-2026-45642: Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Servi
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
nvd
CVE-2025-59280P4LOWCVSS 3.1vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59280 [LOW] CWE-287 CVE-2025-59280: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering o
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2018-8481P4LOWCVSS 3.1vr2v(Server Core installation)2018-10-10
CVE-2018-8481 [LOW] CVE-2018-8481: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2018-8482P4LOWCVSS 3.1vr22018-10-10
CVE-2018-8482 [LOW] CVE-2018-8482: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2015-2454P4LOWCVSS 2.1vr22015-08-15
CVE-2015-2454 [LOW] CWE-264 CVE-2015-2454: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows KMD Security Feature Bypass Vul
nvd