Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 206 of 262
CVE-2023-35629P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.246142023-12-12
CVE-2023-35629 [MEDIUM] CWE-125 CVE-2023-35629: Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26242P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26242 [HIGH] CWE-591 CVE-2024-26242: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2024-21355P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21355 [HIGH] CWE-591 CVE-2024-21355: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2024-38214P4MEDIUMCVSS 6.5fixed in 6.2.9200.25031vr2+1 more2024-08-13
CVE-2024-38214 [MEDIUM] CWE-125 CVE-2024-38214: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
nvd
CVE-2024-26252P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26252 [MEDIUM] CWE-822 CVE-2024-26252: Windows rndismp6.sys Remote Code Execution Vulnerability
Windows rndismp6.sys Remote Code Execution Vulnerability
nvd
CVE-2024-26253P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26253 [MEDIUM] CWE-20 CVE-2024-26253: Windows rndismp6.sys Remote Code Execution Vulnerability
Windows rndismp6.sys Remote Code Execution Vulnerability
nvd
CVE-2022-30205P4MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.237712022-07-12
CVE-2022-30205 [MEDIUM] CWE-362 CVE-2022-30205: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2023-21694P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21694 [MEDIUM] CWE-122 CVE-2023-21694: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2026-102188P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-102188 [MEDIUM] CWE-822 CVE-2026-102188: Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elev
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-50299P4MEDIUMCVSS 6.8vr22026-07-14
CVE-2026-50299 [MEDIUM] CWE-122 CVE-2026-50299: Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
nvd
CVE-2026-45658P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45658 [MEDIUM] CWE-284 CVE-2026-45658: Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feat
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2025-49743P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-49743 [MEDIUM] CWE-362 CVE-2025-49743: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54915P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-54915 [MEDIUM] CWE-843 CVE-2025-54915: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54109P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-54109 [MEDIUM] CWE-843 CVE-2025-54109: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53808P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53808 [MEDIUM] CWE-843 CVE-2025-53808: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53810P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-53810 [MEDIUM] CWE-843 CVE-2025-53810: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54094P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09
CVE-2025-54094 [MEDIUM] CWE-843 CVE-2025-54094: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2020-15706P4MEDIUMCVSS 6.4vr22020-07-29
CVE-2020-15706 [MEDIUM] CWE-362 CVE-2020-15706: GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnera
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 version 2.04 and prior versions.
nvd
CVE-2026-83703P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83703 [MEDIUM] CWE-125 CVE-2026-83703: Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an a
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
nvd
CVE-2022-21924P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21924 [MEDIUM] CVE-2022-21924: Workstation Service Remote Protocol Security Feature Bypass Vulnerability
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
nvd