cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 203 of 262
CVE-2023-35360P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35360 [HIGH] CWE-591 CVE-2023-35360: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2018-0753P4MEDIUMCVSS 5.9vr22018-01-04
CVE-2018-0753 [MEDIUM] CVE-2018-0753: Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Wind Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability".
nvd
CVE-2024-30063P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.249192024-06-11
CVE-2024-30063 [MEDIUM] CWE-641 CVE-2024-30063: Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2025-49678P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08
CVE-2025-49678 [HIGH] CWE-362 CVE-2025-49678: Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-24906P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24906 [MEDIUM] CWE-190 CVE-2023-24906: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24857P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24857 [MEDIUM] CWE-126 CVE-2023-24857: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24863P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24863 [MEDIUM] CWE-190 CVE-2023-24863: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24870P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24870 [MEDIUM] CWE-126 CVE-2023-24870: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2026-57097P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-57097 [MEDIUM] CWE-426 CVE-2026-57097: Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-77892P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-77892 [MEDIUM] CWE-693 CVE-2026-77892: No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-50298P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50298 [MEDIUM] CWE-190 CVE-2026-50298: Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate p Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-54104P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-54104 [MEDIUM] CWE-843 CVE-2025-54104: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62881P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62881 [MEDIUM] CWE-122 CVE-2026-62881: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62769P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62769 [MEDIUM] CWE-122 CVE-2026-62769: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65798P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-65798 [MEDIUM] CWE-197 CVE-2026-65798: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62883P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62883 [MEDIUM] CWE-122 CVE-2026-62883: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65797P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-65797 [MEDIUM] CWE-122 CVE-2026-65797: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32170P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-32170 [MEDIUM] CWE-415 CVE-2026-32170: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21530P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-21530 [MEDIUM] CWE-415 CVE-2026-21530: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-105006P4MEDIUMCVSS 6.4vr22026-10-13
CVE-2026-105006 [MEDIUM] CWE-416 CVE-2026-105006: Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a phys Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
← Previous203 / 262Next →
Microsoft Windows Server 2012 vulnerabilities | cvebase