Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,228

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

SortPage 209 of 262

CVE-2019-1318P4MEDIUMCVSS 5.9vr22019-10-10

CVE-2019-1318 [MEDIUM] CWE-290 CVE-2019-1318: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Se A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.

nvd

CVE-2022-29125P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-29125 [HIGH] CVE-2022-29125: Windows Push Notifications Apps Elevation of Privilege Vulnerability Windows Push Notifications Apps Elevation of Privilege Vulnerability

nvd

CVE-2022-29135P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-29135 [HIGH] CVE-2022-29135: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

nvd

CVE-2019-1177P4HIGHCVSS 7.0vr2≥ 6.2.0, < publication2019-08-14

CVE-2019-1177 [HIGH] CWE-269 CVE-2019-1177: An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memo An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerab

nvd

CVE-2022-21867P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11

CVE-2022-21867 [HIGH] CVE-2022-21867: Windows Push Notifications Apps Elevation of Privilege Vulnerability Windows Push Notifications Apps Elevation of Privilege Vulnerability

nvd

CVE-2023-28224P4HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11

CVE-2023-28224 [HIGH] CWE-591 CVE-2023-28224: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

nvd

CVE-2023-23407P4HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14

CVE-2023-23407 [HIGH] CWE-591 CVE-2023-23407: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

nvd

CVE-2023-23414P4HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14

CVE-2023-23414 [HIGH] CWE-591 CVE-2023-23414: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

nvd

CVE-2022-29151P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-29151 [HIGH] CVE-2022-29151: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

nvd

CVE-2022-29150P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-29150 [HIGH] CVE-2022-29150: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

nvd

CVE-2016-3302P4MEDIUMCVSS 6.3vr22016-09-14

CVE-2016-3302 [MEDIUM] CWE-264 CVE-2016-3302: Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a (1) crafted Wi-Fi access point or (2) crafted mobile-broadband device, aka "Windows Lock Scr

nvd

CVE-2023-35329P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11

CVE-2023-35329 [MEDIUM] CWE-400 CVE-2023-35329: Windows Authentication Denial of Service Vulnerability Windows Authentication Denial of Service Vulnerability

nvd

CVE-2024-43534P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.251182024-10-08

CVE-2024-43534 [MEDIUM] CWE-125 CVE-2024-43534: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

nvd

CVE-2020-1071P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < publication2020-05-21

CVE-2020-1071 [MEDIUM] CWE-755 CVE-2020-1071: An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An

nvd

CVE-2022-38027P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11

CVE-2022-38027 [HIGH] CWE-362 CVE-2022-38027: Windows Storage Elevation of Privilege Vulnerability Windows Storage Elevation of Privilege Vulnerability

nvd

CVE-2023-29368P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14

CVE-2023-29368 [HIGH] CWE-415 CVE-2023-29368: Windows Filtering Platform Elevation of Privilege Vulnerability Windows Filtering Platform Elevation of Privilege Vulnerability

nvd

CVE-2023-28216P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11

CVE-2023-28216 [HIGH] CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

nvd

CVE-2022-26807P4HIGHCVSS 7.0vr22022-04-15

CVE-2022-26807 [HIGH] CWE-362 CVE-2022-26807: Windows Work Folder Service Elevation of Privilege Vulnerability Windows Work Folder Service Elevation of Privilege Vulnerability

nvd

CVE-2019-0986P4MEDIUMCVSS 6.3vr2≥ 6.2.9200.0, < publication2019-06-12

CVE-2019-0986 [MEDIUM] CWE-59 CVE-2019-0986: An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) impro An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a spe

nvd

CVE-2023-21542P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10

CVE-2023-21542 [HIGH] CWE-59 CVE-2023-21542: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability

nvd

← Previous209 / 262Next →