cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 192 of 262
CVE-2015-0005P4MEDIUMCVSS 4.3vr22015-03-11
CVE-2015-0005 [MEDIUM] CWE-254 CVE-2015-0005: The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and W The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the abil
nvd
CVE-2023-28308P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28308 [MEDIUM] CWE-416 CVE-2023-28308: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28278P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28278 [MEDIUM] CWE-591 CVE-2023-28278: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28305P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28305 [MEDIUM] CWE-416 CVE-2023-28305: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28306P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28306 [MEDIUM] CWE-416 CVE-2023-28306: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28307P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28307 [MEDIUM] CWE-416 CVE-2023-28307: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28255P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28255 [MEDIUM] CWE-591 CVE-2023-28255: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28256P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28256 [MEDIUM] CWE-591 CVE-2023-28256: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-38665P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.235172021-11-10
CVE-2021-38665 [MEDIUM] CVE-2021-38665: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2026-72942P3MEDIUMCVSS 6.5vr22026-09-08
CVE-2026-72942 [MEDIUM] CWE-125 CVE-2026-72942: Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-54126P3MEDIUMCVSS 6.5≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-54126 [MEDIUM] CWE-125 CVE-2026-54126: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-58739P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58739 [MEDIUM] CWE-200 CVE-2025-58739: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2017-8582P4MEDIUMCVSS 5.9vr22017-07-11
CVE-2017-8582 [MEDIUM] CWE-200 CVE-2017-8582: HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in memory, aka "Https.sys Information Disclosure Vulnerability
nvd
CVE-2026-62750P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62750 [MEDIUM] CWE-187 CVE-2026-62750: Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
nvd
CVE-2026-85847P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85847 [MEDIUM] CWE-125 CVE-2026-85847: Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2013-3876P4HIGHCVSS 7.1vr22013-11-18
CVE-2013-3876 [HIGH] CWE-20 CVE-2013-3876: DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2 DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read
nvd
CVE-2019-0821P4MEDIUMCVSS 6.5vr22019-04-09
CVE-2019-0821 [MEDIUM] CVE-2019-0821: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certai An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704.
nvd
CVE-2022-21889P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21889 [HIGH] CVE-2022-21889: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2022-21890P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21890 [HIGH] CVE-2022-21890: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2021-31968P4HIGHCVSS 7.5vr2≥ 6.2.0, < 6.2.9200.233722021-06-08
CVE-2021-31968 [HIGH] CVE-2021-31968: Windows Remote Desktop Services Denial of Service Vulnerability Windows Remote Desktop Services Denial of Service Vulnerability
nvd
← Previous192 / 262Next →
Microsoft Windows Server 2012 vulnerabilities | cvebase