Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 223 of 262
CVE-2026-50455P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50455 [MEDIUM] CWE-908 CVE-2026-50455: Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-54997P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-54997 [MEDIUM] CWE-908 CVE-2026-54997: Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85815P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85815 [MEDIUM] CWE-125 CVE-2026-85815: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96859P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96859 [MEDIUM] CWE-125 CVE-2026-96859: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96247P4MEDIUMCVSS 5.5vr22026-10-13
CVE-2026-96247 [MEDIUM] CWE-908 CVE-2026-96247: Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96314P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96314 [MEDIUM] CWE-125 CVE-2026-96314: Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information lo
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85336P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85336 [MEDIUM] CWE-125 CVE-2026-85336: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85852P4MEDIUMCVSS 5.5vr22026-10-13
CVE-2026-85852 [MEDIUM] CWE-125 CVE-2026-85852: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96846P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96846 [MEDIUM] CWE-125 CVE-2026-96846: Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
nvd
CVE-2026-87698P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-87698 [MEDIUM] CWE-125 CVE-2026-87698: Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45634P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45634 [MEDIUM] CWE-125 CVE-2026-45634: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information loca
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96935P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96935 [MEDIUM] CWE-497 CVE-2026-96935: Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70288P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70288 [MEDIUM] CWE-367 CVE-2026-70288: Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32212P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32212 [MEDIUM] CWE-59 CVE-2026-32212: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll)
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85320P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85320 [MEDIUM] CWE-908 CVE-2026-85320: Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-58638P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-58638 [MEDIUM] CWE-325 CVE-2026-58638: Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-32214P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl
Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45655P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09
CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2021-24080P4MEDIUMCVSS 6.5≥ 6.2.0, < publication2021-02-25
CVE-2021-24080 [MEDIUM] CVE-2021-24080: Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
nvd
CVE-2017-0042P4LOWCVSS 3.1vr22017-03-17
CVE-2017-0042 [LOW] CWE-200 CVE-2017-0042: Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1
Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windows Media Player Information Disclosure Vulnerability."
nvd