cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 189 of 262
CVE-2023-33168P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-33168 [HIGH] CWE-126 CVE-2023-33168: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33167P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-33167 [HIGH] CWE-126 CVE-2023-33167: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33166P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-33166 [HIGH] CWE-126 CVE-2023-33166: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-32034P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32034 [HIGH] CWE-125 CVE-2023-32034: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-32035P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32035 [HIGH] CWE-125 CVE-2023-32035: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33169P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-33169 [HIGH] CWE-126 CVE-2023-33169: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2020-16997P3MEDIUMCVSS 6.5vr2≥ 6.2.0, < publication2020-11-11
CVE-2020-16997 [MEDIUM] CVE-2020-16997: Remote Desktop Protocol Server Information Disclosure Vulnerability Remote Desktop Protocol Server Information Disclosure Vulnerability
nvd
CVE-2019-0802P4MEDIUMCVSS 6.5vr22019-04-09
CVE-2019-0802 [MEDIUM] CVE-2019-0802: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849.
nvd
CVE-2019-0849P4MEDIUMCVSS 6.5vr22019-04-09
CVE-2019-0849 [MEDIUM] CVE-2019-0849: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0802.
nvd
CVE-2023-21526P3HIGHCVSS 7.4vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-21526 [HIGH] CVE-2023-21526: Windows Netlogon Information Disclosure Vulnerability Windows Netlogon Information Disclosure Vulnerability
nvd
CVE-2023-24948P3HIGHCVSS 7.4vr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09
CVE-2023-24948 [HIGH] CWE-122 CVE-2023-24948: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-32054P3HIGHCVSS 7.3vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32054 [HIGH] CWE-36 CVE-2023-32054: Volume Shadow Copy Elevation of Privilege Vulnerability Volume Shadow Copy Elevation of Privilege Vulnerability
nvd
CVE-2015-2423P4MEDIUMCVSS 4.3vr22015-08-15
CVE-2015-2423 [MEDIUM] CWE-200 CVE-2015-2423: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint
nvd
CVE-2025-48819P3HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08
CVE-2025-48819 [HIGH] CWE-591 CVE-2025-48819: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2025-26667P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-26667 [MEDIUM] CWE-200 CVE-2025-26667: Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Serv Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-27474P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-27474 [MEDIUM] CWE-908 CVE-2025-27474: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2019-0660P4MEDIUMCVSS 6.5vr22019-03-05
CVE-2019-0660 [MEDIUM] CVE-2019-0660: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0664.
nvd
CVE-2019-0664P4MEDIUMCVSS 6.5vr22019-03-05
CVE-2019-0664 [MEDIUM] CVE-2019-0664: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660.
nvd
CVE-2019-0615P4MEDIUMCVSS 6.5vr22019-03-05
CVE-2019-0615 [MEDIUM] CVE-2019-0615: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
nvd
CVE-2019-0602P4MEDIUMCVSS 6.5vr22019-03-05
CVE-2019-0602 [MEDIUM] CVE-2019-0602: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
nvd
← Previous189 / 262Next →
Microsoft Windows Server 2012 vulnerabilities | cvebase