Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 245 of 262
CVE-2021-26884P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.232982021-03-11
CVE-2021-26884 [MEDIUM] CVE-2021-26884: Windows Media Photo Codec Information Disclosure Vulnerability
Windows Media Photo Codec Information Disclosure Vulnerability
nvd
CVE-2021-24076P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-02-25
CVE-2021-24076 [MEDIUM] CVE-2021-24076: Microsoft Windows VMSwitch Information Disclosure Vulnerability
Microsoft Windows VMSwitch Information Disclosure Vulnerability
nvd
CVE-2021-24079P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-02-25
CVE-2021-24079 [MEDIUM] CVE-2021-24079: Windows Backup Engine Information Disclosure Vulnerability
Windows Backup Engine Information Disclosure Vulnerability
nvd
CVE-2024-38017P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-38017 [MEDIUM] CWE-200 CVE-2024-38017: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2024-26174P4MEDIUMCVSS 5.5fixed in 6.2.9200.24768vr2+1 more2024-03-12
CVE-2024-26174 [MEDIUM] CWE-125 CVE-2024-26174: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2022-29102P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-29102 [MEDIUM] CVE-2022-29102: Windows Failover Cluster Information Disclosure Vulnerability
Windows Failover Cluster Information Disclosure Vulnerability
nvd
CVE-2022-22011P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10
CVE-2022-22011 [MEDIUM] CVE-2022-22011: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2018-8341P4MEDIUMCVSS 4.7vr2v(Server Core installation)2018-08-15
CVE-2018-8341 [MEDIUM] CWE-200 CVE-2018-8341: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE I
nvd
CVE-2021-28317P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-04-13
CVE-2021-28317 [MEDIUM] CVE-2021-28317: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-23297P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09
CVE-2022-23297 [MEDIUM] CVE-2022-23297: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2024-21311P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-21311 [MEDIUM] CWE-125 CVE-2024-21311: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2021-38662P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < 6.2.9200.234902021-10-13
CVE-2021-38662 [MEDIUM] CVE-2021-38662: Windows Fast FAT File System Driver Information Disclosure Vulnerability
Windows Fast FAT File System Driver Information Disclosure Vulnerability
nvd
CVE-2021-41343P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < 6.2.9200.234902021-10-13
CVE-2021-41343 [MEDIUM] CVE-2021-41343: Windows Fast FAT File System Driver Information Disclosure Vulnerability
Windows Fast FAT File System Driver Information Disclosure Vulnerability
nvd
CVE-2021-38663P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < 6.2.9200.234902021-10-13
CVE-2021-38663 [MEDIUM] CVE-2021-38663: Windows exFAT File System Information Disclosure Vulnerability
Windows exFAT File System Information Disclosure Vulnerability
nvd
CVE-2023-33174P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-33174 [MEDIUM] CWE-200 CVE-2023-33174: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2018-8433P4MEDIUMCVSS 4.7vr2v(Server Core installation)2018-09-13
CVE-2018-8433 [MEDIUM] CWE-200 CVE-2018-8433: An information disclosure vulnerability exists when the Windows Graphics component improperly handle
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008
nvd
CVE-2024-38151P4MEDIUMCVSS 5.5fixed in 6.2.9200.25031vr2+1 more2024-08-13
CVE-2024-38151 [MEDIUM] CWE-125 CVE-2024-38151: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2018-8207P4MEDIUMCVSS 4.7vr22018-06-14
CVE-2018-8207 [MEDIUM] CVE-2018-8207: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2023-24945P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.242662023-05-09
CVE-2023-24945 [MEDIUM] CWE-190 CVE-2023-24945: Windows iSCSI Target Service Information Disclosure Vulnerability
Windows iSCSI Target Service Information Disclosure Vulnerability
nvd
CVE-2025-59190P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-59190 [MEDIUM] CWE-20 CVE-2025-59190: Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to d
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
nvd