Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 202 of 262
CVE-2015-6111P4MEDIUMCVSS 6.8vr22015-11-11
CVE-2015-6111 [MEDIUM] CWE-399 CVE-2015-6111: IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1,
IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles encryption negotiation, which allows remote authenticated users to cause a denial of service (system hang) via crafted IP traffic, aka "Windows IPSec Denial of Service Vulnerability."
nvd
CVE-2025-21419P4HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.253172025-02-11
CVE-2025-21419 [HIGH] CWE-59 CVE-2025-21419: Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
nvd
CVE-2024-21314P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-21314 [MEDIUM] CWE-125 CVE-2024-21314: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2024-20660P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20660 [MEDIUM] CWE-125 CVE-2024-20660: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2024-20680P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20680 [MEDIUM] CWE-822 CVE-2024-20680: Windows Message Queuing Client (MSMQC) Information Disclosure
Windows Message Queuing Client (MSMQC) Information Disclosure
nvd
CVE-2024-20664P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20664 [MEDIUM] CWE-822 CVE-2024-20664: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2019-1126P4MEDIUMCVSS 5.3vr22019-07-15
CVE-2019-1126 [MEDIUM] CVE-2019-1126: A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which
A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Director
nvd
CVE-2024-20663P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20663 [MEDIUM] CWE-822 CVE-2024-20663: Windows Message Queuing Client (MSMQC) Information Disclosure
Windows Message Queuing Client (MSMQC) Information Disclosure
nvd
CVE-2022-21868P4HIGHCVSS 7.0vr22022-01-11
CVE-2022-21868 [HIGH] CVE-2022-21868: Windows Devices Human Interface Elevation of Privilege Vulnerability
Windows Devices Human Interface Elevation of Privilege Vulnerability
nvd
CVE-2022-21862P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21862 [HIGH] CVE-2022-21862: Windows Application Model Core API Elevation of Privilege Vulnerability
Windows Application Model Core API Elevation of Privilege Vulnerability
nvd
CVE-2024-38022P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-38022 [HIGH] CWE-59 CVE-2024-38022: Windows Image Acquisition Elevation of Privilege Vulnerability
Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2022-30151P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.237362022-06-15
CVE-2022-30151 [HIGH] CVE-2022-30151: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-21439P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-21439 [HIGH] CWE-416 CVE-2024-21439: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2022-26808P4HIGHCVSS 7.0vr22022-04-15
CVE-2022-26808 [HIGH] CWE-362 CVE-2022-26808: Windows File Explorer Elevation of Privilege Vulnerability
Windows File Explorer Elevation of Privilege Vulnerability
nvd
CVE-2022-26827P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15
CVE-2022-26827 [HIGH] CWE-362 CVE-2022-26827: Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
nvd
CVE-2023-29364P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-29364 [HIGH] CWE-190 CVE-2023-29364: Windows Authentication Elevation of Privilege Vulnerability
Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2025-58730P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58730 [HIGH] CWE-416 CVE-2025-58730: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-58736P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58736 [HIGH] CWE-416 CVE-2025-58736: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-58733P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58733 [HIGH] CWE-416 CVE-2025-58733: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
nvd
CVE-2023-35361P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35361 [HIGH] CWE-362 CVE-2023-35361: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd