Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 207 of 262
CVE-2026-77887P4MEDIUMCVSS 6.4vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-77887 [MEDIUM] CWE-125 CVE-2026-77887: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
nvd
CVE-2026-77891P4MEDIUMCVSS 6.4vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-77891 [MEDIUM] CWE-125 CVE-2026-77891: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
nvd
CVE-2014-6318P4MEDIUMCVSS 4.3vr22014-11-11
CVE-2014-6318 [MEDIUM] CWE-287 CVE-2014-6318: The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Ser
The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid credentials, which makes it easier for remote attackers to byp
nvd
CVE-2025-53719P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-53719 [MEDIUM] CWE-908 CVE-2025-53719: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-50156P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-50156 [MEDIUM] CWE-908 CVE-2025-50156: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-53148P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-53148 [MEDIUM] CWE-908 CVE-2025-53148: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-50157P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-50157 [MEDIUM] CWE-908 CVE-2025-50157: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-53138P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-53138 [MEDIUM] CWE-908 CVE-2025-53138: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-53153P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-53153 [MEDIUM] CWE-908 CVE-2025-53153: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69552P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69552 [MEDIUM] CWE-209 CVE-2026-69552: Generation of error message containing sensitive information in Windows Print Spooler Components all
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69372P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69372 [MEDIUM] CWE-125 CVE-2026-69372: Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
nvd
CVE-2016-0089P4HIGHCVSS 7.1vr22016-04-12
CVE-2016-0089 [HIGH] CWE-200 CVE-2016-0089: Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS us
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."
nvd
CVE-2026-25185P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10
CVE-2026-25185 [MEDIUM] CWE-200 CVE-2026-25185: Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows a
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-20927P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20927 [MEDIUM] CWE-362 CVE-2026-20927: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-70057P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70057 [MEDIUM] CWE-863 CVE-2026-70057: Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69321P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69321 [MEDIUM] CWE-306 CVE-2026-69321: Missing authentication for critical function in Windows Power Dependency Coordinator allows an autho
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
nvd
CVE-2014-4074P4HIGHCVSS 7.2vr22014-09-10
CVE-2014-4074 [HIGH] CWE-264 CVE-2014-4074: The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows
The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via an application that schedules a crafted task, aka "Task Scheduler Vulnerability."
nvd
CVE-2015-2550P4HIGHCVSS 7.2vr22015-10-14
CVE-2015-2550 [HIGH] CWE-264 CVE-2015-2550: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
nvd
CVE-2022-29112P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-29112 [MEDIUM] CVE-2022-29112: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2015-0074P4MEDIUMCVSS 4.3vr22015-03-11
CVE-2015-0074 [MEDIUM] CWE-119 CVE-2015-0074: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly allocate memory, which allows remote attackers to cause a denial of service via a crafted (1) web site or (2) file, aka "Ado
nvd