Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 213 of 262
CVE-2023-21760P4HIGHCVSS 7.1vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21760 [HIGH] CWE-59 CVE-2023-21760: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2023-29369P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-29369 [MEDIUM] CWE-190 CVE-2023-29369: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2018-0976P4MEDIUMCVSS 5.3vr2v(Server Core installation)2018-04-12
CVE-2018-0976 [MEDIUM] CVE-2018-0976: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.
nvd
CVE-2025-50158P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-50158 [HIGH] CWE-367 CVE-2025-50158: Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-23385P4HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-23385 [HIGH] CWE-190 CVE-2023-23385: Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
nvd
CVE-2021-33764P4MEDIUMCVSS 5.9≥ 6.2.9200.0, < 6.2.9200.234092021-07-14
CVE-2021-33764 [MEDIUM] CVE-2021-33764: Windows Key Distribution Center Information Disclosure Vulnerability
Windows Key Distribution Center Information Disclosure Vulnerability
nvd
CVE-2023-21560P4MEDIUMCVSS 6.6vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21560 [MEDIUM] CWE-122 CVE-2023-21560: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28269P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28269 [MEDIUM] CWE-122 CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2024-38013P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-38013 [MEDIUM] CWE-59 CVE-2024-38013: Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2022-22028P4MEDIUMCVSS 5.9vr2≥ 6.2.9200.0, < 6.2.9200.237712022-07-12
CVE-2022-22028 [MEDIUM] CVE-2022-22028: Windows Network File System Information Disclosure Vulnerability
Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2022-35754P4MEDIUMCVSS 6.7vr2≥ 6.2.9200.0, < 6.2.9200.238172023-05-31
CVE-2022-35754 [MEDIUM] CVE-2022-35754: Unified Write Filter Elevation of Privilege Vulnerability
Unified Write Filter Elevation of Privilege Vulnerability
nvd
CVE-2024-21430P4MEDIUMCVSS 6.4vr2≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-21430 [MEDIUM] CWE-125 CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
nvd
CVE-2016-7223P4MEDIUMCVSS 6.1vr22016-11-10
CVE-2016-7223 [MEDIUM] CWE-284 CVE-2016-7223: Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,
Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
nvd
CVE-2025-21242P4MEDIUMCVSS 5.9vr2≥ 6.2.9200.0, < 6.2.9200.252732025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability
Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2016-0190P4MEDIUMCVSS 5.5vr22016-05-11
CVE-2016-0190 [MEDIUM] CWE-200 CVE-2016-0190: Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1
Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka "Remote Desktop Protocol Drive Redirection Information D
nvd
CVE-2026-50294P4MEDIUMCVSS 6.2vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50294 [MEDIUM] CWE-497 CVE-2026-50294: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50485P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2026-69416P4MEDIUMCVSS 5.7vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69416 [MEDIUM] CWE-126 CVE-2026-69416: Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjace
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2026-69644P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69644 [MEDIUM] CWE-497 CVE-2026-69644: Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
nvd