cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,228 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55

Vulnerabilities

Page 233 of 262
CVE-2022-26935P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-26935 [MEDIUM] CVE-2022-26935: Windows WLAN AutoConfig Service Information Disclosure Vulnerability Windows WLAN AutoConfig Service Information Disclosure Vulnerability
nvd
CVE-2022-29120P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-29120 [MEDIUM] CVE-2022-29120: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29134P4MEDIUMCVSS 6.5vr22022-05-10
CVE-2022-29134 [MEDIUM] CVE-2022-29134: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29122P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-29122 [MEDIUM] CVE-2022-29122: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29123P4MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-29123 [MEDIUM] CVE-2022-29123: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2020-1267P4MEDIUMCVSS 4.9vr22020-07-14
CVE-2020-1267 [MEDIUM] CVE-2020-1267: This security update corrects a denial of service in the Local Security Authority Subsystem Service This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.
nvd
CVE-2021-1656P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1656 [MEDIUM] CVE-2021-1656: TPM Device Driver Information Disclosure Vulnerability TPM Device Driver Information Disclosure Vulnerability
nvd
CVE-2015-0095P4MEDIUMCVSS 5.6vr22015-03-11
CVE-2015-0095 [MEDIUM] CWE-476 CVE-2015-0095: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service (NULL pointer dereference and blue screen), or obtain sensitive information from kernel m
nvd
CVE-2018-8336P4MEDIUMCVSS 5.5v(Server Core installation)2018-09-13
CVE-2018-8336 [MEDIUM] CWE-200 CVE-2018-8336: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8419, CVE-2018-8442, CVE-2018-8443, CVE-2018-8445, CVE-2018-8446.
nvd
CVE-2017-0297P4MEDIUMCVSS 5.0vr22017-06-15
CVE-2017-0297 [MEDIUM] CWE-200 CVE-2017-0297: The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vul
nvd
CVE-2017-8475P4MEDIUMCVSS 5.0vr22017-06-15
CVE-2017-8475 [MEDIUM] CVE-2017-8475: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique
nvd
CVE-2019-0755P4MEDIUMCVSS 5.5vr22019-04-09
CVE-2019-0755 [MEDIUM] CVE-2019-0755: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.
nvd
CVE-2019-0663P4MEDIUMCVSS 5.5vr22019-03-05
CVE-2019-0663 [MEDIUM] CVE-2019-0663: An information disclosure vulnerability exists when the Windows kernel improperly initializes object An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0621, CVE-2019-0661.
nvd
CVE-2019-1010P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < publication2019-06-12
CVE-2019-1010 [MEDIUM] CWE-200 CVE-2019-1010: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to op
nvd
CVE-2019-1015P4MEDIUMCVSS 4.7≥ 6.2.9200.0, < publication2019-06-12
CVE-2019-1015 [MEDIUM] CWE-200 CVE-2019-1015: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to op
nvd
CVE-2019-1050P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < publication2019-06-12
CVE-2019-1050 [MEDIUM] CWE-200 CVE-2019-1050: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to op
nvd
CVE-2019-1012P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < publication2019-06-12
CVE-2019-1012 [MEDIUM] CWE-200 CVE-2019-1012: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to op
nvd
CVE-2019-1046P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < publication2019-06-12
CVE-2019-1046 [MEDIUM] CWE-200 CVE-2019-1046: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to op
nvd
CVE-2024-38099P4MEDIUMCVSS 5.9vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-38099 [MEDIUM] CWE-287 CVE-2024-38099: Windows Remote Desktop Licensing Service Denial of Service Vulnerability Windows Remote Desktop Licensing Service Denial of Service Vulnerability
nvd
CVE-2019-0848P4MEDIUMCVSS 5.5vr22019-04-09
CVE-2019-0848 [MEDIUM] CVE-2019-0848: An information disclosure vulnerability exists when the win32k component improperly provides kernel An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.
nvd
Microsoft Windows Server 2012 vulnerabilities | cvebase