Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 196 of 262
CVE-2025-58729P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58729 [MEDIUM] CWE-1287 CVE-2025-58729: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
CVE-2019-0961P4MEDIUMCVSS 6.5vr22019-05-16
CVE-2019-0961 [MEDIUM] CVE-2019-0961: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882.
nvd
CVE-2019-0882P4MEDIUMCVSS 6.5vr22019-05-16
CVE-2019-0882 [MEDIUM] CVE-2019-0882: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0961.
nvd
CVE-2019-0774P4MEDIUMCVSS 6.5vr22019-04-09
CVE-2019-0774 [MEDIUM] CVE-2019-0774: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0614.
nvd
CVE-2026-69902P3MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69902 [MEDIUM] CWE-822 CVE-2026-69902: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-68898P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68898 [MEDIUM] CWE-125 CVE-2026-68898: Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2016-3251P4LOWCVSS 2.8vr22016-07-13
CVE-2016-3251 [LOW] CWE-200 CVE-2016-3251: The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2
The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerabi
nvd
CVE-2026-49804P3MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-49804 [MEDIUM] CWE-122 CVE-2026-49804: Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate pr
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2019-1094P4MEDIUMCVSS 6.5vr22019-07-15
CVE-2019-1094 [MEDIUM] CWE-200 CVE-2019-1094: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
nvd
CVE-2019-1095P4MEDIUMCVSS 6.5vr22019-07-15
CVE-2019-1095 [MEDIUM] CVE-2019-1095: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
nvd
CVE-2017-0170P4MEDIUMCVSS 6.5vr22017-07-11
CVE-2017-0170 [MEDIUM] CWE-611 CVE-2017-0170: Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windo
Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka "Windows Performance Monitor Information Disclosure Vulnerabili
nvd
CVE-2017-8695P4MEDIUMCVSS 5.3vr22017-09-13
CVE-2017-8695 [MEDIUM] CWE-200 CVE-2017-8695: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windo
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live
nvd
CVE-2020-0853P4MEDIUMCVSS 6.5vr22020-03-12
CVE-2020-0853 [MEDIUM] CVE-2020-0853: An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails t
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.
nvd
CVE-2026-62715P4MEDIUMCVSS 6.5vr22026-08-11
CVE-2026-62715 [MEDIUM] CWE-125 CVE-2026-62715: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62716P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62716 [MEDIUM] CWE-125 CVE-2026-62716: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62714P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62714 [MEDIUM] CWE-125 CVE-2026-62714: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62718P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62718 [MEDIUM] CWE-125 CVE-2026-62718: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62745P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62745 [MEDIUM] CWE-125 CVE-2026-62745: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62742P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62742 [MEDIUM] CWE-125 CVE-2026-62742: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-62814P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62814 [MEDIUM] CWE-125 CVE-2026-62814: Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
nvd