Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,228

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

SortPage 232 of 262

CVE-2025-49664P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08

CVE-2025-49664 [MEDIUM] CWE-200 CVE-2025-49664: Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Hos Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally.

nvd

CVE-2025-59211P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14

CVE-2025-59211 [MEDIUM] CWE-200 CVE-2025-59211: Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.

nvd

CVE-2025-59510P4MEDIUMCVSS 5.5vr22025-11-11

CVE-2025-59510 [MEDIUM] CWE-59 CVE-2025-59510: Improper link resolution before file access ('link following') in Windows Routing and Remote Access Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.

nvd

CVE-2026-69684P4MEDIUMCVSS 5.5vr22026-09-08

CVE-2026-69684 [MEDIUM] CWE-209 CVE-2026-69684: Generation of error message containing sensitive information in Windows Error Reporting allows an au Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

nvd

CVE-2026-50431P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-50431 [MEDIUM] CWE-200 CVE-2026-50431: Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

nvd

CVE-2025-59209P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14

CVE-2025-59209 [MEDIUM] CWE-200 CVE-2025-59209: Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.

nvd

CVE-2023-28251P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09

CVE-2023-28251 [MEDIUM] CVE-2023-28251: Windows Driver Revocation List Security Feature Bypass Vulnerability Windows Driver Revocation List Security Feature Bypass Vulnerability

nvd

CVE-2025-59188P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14

CVE-2025-59188 [MEDIUM] CWE-200 CVE-2025-59188: Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an aut Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.

nvd

CVE-2026-32217P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14

CVE-2026-32217 [MEDIUM] CWE-532 CVE-2026-32217: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

nvd

CVE-2026-27930P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14

CVE-2026-27930 [MEDIUM] CWE-125 CVE-2026-27930: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

nvd

CVE-2024-21320MEDIUMCVSS 6.5PoC≥ 6.2.9200.0, < 6.2.9200.246642024-01-09

CVE-2024-21320 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability Windows Themes Spoofing Vulnerability Windows Themes Spoofing Vulnerability

cvelistv5

CVE-2025-21189P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.252732025-01-14

CVE-2025-21189 [MEDIUM] CWE-41 CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability

nvd

CVE-2026-83774P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83774 [MEDIUM] CWE-497 CVE-2026-83774: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

nvd

CVE-2026-83925P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83925 [MEDIUM] CWE-497 CVE-2026-83925: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

nvd

CVE-2026-83905P4MEDIUMCVSS 4.7vr22026-10-13

CVE-2026-83905 [MEDIUM] CWE-497 CVE-2026-83905: Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

nvd

CVE-2021-1696P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-01-12

CVE-2021-1696 [MEDIUM] CVE-2021-1696: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

nvd

CVE-2026-83897P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83897 [MEDIUM] CWE-497 CVE-2026-83897: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

nvd

CVE-2026-70077P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-70077 [MEDIUM] CWE-416 CVE-2026-70077: Use after free in Windows Kernel allows an authorized attacker to disclose information locally. Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

nvd

CVE-2022-34728P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34728 [MEDIUM] CVE-2022-34728: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

nvd

CVE-2026-73019P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-73019 [MEDIUM] CWE-41 CVE-2026-73019: Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to by Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

nvd

← Previous232 / 262Next →