Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 191 of 262
CVE-2026-69911P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69911 [HIGH] CWE-416 CVE-2026-69911: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85354P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85354 [HIGH] CWE-416 CVE-2026-85354: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50297P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50297 [HIGH] CWE-284 CVE-2026-50297: Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50325P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50325 [HIGH] CWE-284 CVE-2026-50325: Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49805P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-49805 [HIGH] CWE-284 CVE-2026-49805: Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83510P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83510 [HIGH] CWE-367 CVE-2026-83510: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85943P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85943 [HIGH] CWE-122 CVE-2026-85943: Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69779P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69779 [HIGH] CWE-367 CVE-2026-69779: Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62728P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62728 [HIGH] CWE-125 CVE-2026-62728: Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88149P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-88149 [HIGH] CWE-415 CVE-2026-88149: Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34341P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-34341 [HIGH] CWE-415 CVE-2026-34341: Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate
Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-32715P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.255222025-06-10
CVE-2025-32715 [MEDIUM] CWE-125 CVE-2025-32715: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-84018P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-84018 [HIGH] CWE-367 CVE-2026-84018: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32086P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32086 [HIGH] CWE-362 CVE-2026-32086: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32150P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32150 [HIGH] CWE-362 CVE-2026-32150: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87710P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-87710 [HIGH] CWE-362 CVE-2026-87710: Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized a
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28223P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28223 [MEDIUM] CWE-416 CVE-2023-28223: Windows Domain Name Service Remote Code Execution Vulnerability
Windows Domain Name Service Remote Code Execution Vulnerability
nvd
CVE-2015-0061P4MEDIUMCVSS 4.3vr22015-02-11
CVE-2015-0061 [MEDIUM] CWE-200 CVE-2015-0061: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for TIFF images, which allows remote attackers to obtain sensitive information from process memory via a crafted image file, aka "
nvd
CVE-2023-32043P3MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32043 [MEDIUM] CWE-327 CVE-2023-32043: Windows Remote Desktop Security Feature Bypass Vulnerability
Windows Remote Desktop Security Feature Bypass Vulnerability
nvd
CVE-2024-43487P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.250732024-09-10
CVE-2024-43487 [MEDIUM] CWE-693 CVE-2024-43487: Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
nvd