Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 250 of 262
CVE-2024-35270P4MEDIUMCVSS 5.3vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09
CVE-2024-35270 [MEDIUM] CWE-400 CVE-2024-35270: Windows iSCSI Service Denial of Service Vulnerability
Windows iSCSI Service Denial of Service Vulnerability
nvd
CVE-2023-24911P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.241682023-03-14
CVE-2023-24911 [MEDIUM] CWE-191 CVE-2023-24911: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2025-24055P4MEDIUMCVSS 4.3fixed in 6.2.9200.25368vr2+1 more2025-03-11
CVE-2025-24055 [MEDIUM] CWE-125 CVE-2025-24055: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2026-20936P4MEDIUMCVSS 4.3vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20936 [MEDIUM] CWE-125 CVE-2026-20936: Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a phys
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2022-35832P4MEDIUMCVSS 5.5vr22022-09-13
CVE-2022-35832 [MEDIUM] CVE-2022-35832: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2022-22710P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236052022-02-09
CVE-2022-22710 [MEDIUM] CVE-2022-22710: Windows Common Log File System Driver Denial of Service Vulnerability
Windows Common Log File System Driver Denial of Service Vulnerability
nvd
CVE-2021-28443P4MEDIUMCVSS 5.5vr2≥ 6.2.0, < publication2021-04-13
CVE-2021-28443 [MEDIUM] CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2022-21973P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09
CVE-2022-21973 [MEDIUM] CVE-2022-21973: Windows Media Center Update Denial of Service Vulnerability
Windows Media Center Update Denial of Service Vulnerability
nvd
CVE-2022-24484P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15
CVE-2022-24484 [MEDIUM] CVE-2022-24484: Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
nvd
CVE-2015-0001P4LOWCVSS 1.9vr22015-01-13
CVE-2015-0001 [LOW] CWE-264 CVE-2015-0001: The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Securi
nvd
CVE-2022-21845P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.237712022-07-12
CVE-2022-21845 [MEDIUM] CVE-2022-21845: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-20691P4MEDIUMCVSS 4.7vr2≥ 6.2.9200.0, < 6.2.9200.246642024-01-09
CVE-2024-20691 [MEDIUM] CWE-125 CVE-2024-20691: Windows Themes Information Disclosure Vulnerability
Windows Themes Information Disclosure Vulnerability
nvd
CVE-2016-7214P4LOWCVSS 3.3vr22016-11-10
CVE-2016-7214 [LOW] CWE-200 CVE-2016-7214: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted application, aka "Win32k Information Disclosure Vulnerabili
nvd
CVE-2023-29325HIGHCVSS 8.1≥ 6.2.9200.0, < 6.2.9200.242662023-05-09
CVE-2023-29325 [HIGH] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2024-21340P4MEDIUMCVSS 4.6vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21340 [MEDIUM] CWE-126 CVE-2024-21340: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2016-0175P4LOWCVSS 3.3vr22016-05-11
CVE-2016-0175 [LOW] CWE-200 CVE-2016-0175: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted applicat
nvd
CVE-2025-29839P4MEDIUMCVSS 4.0vr2≥ 6.2.9200.0, < 6.2.9200.254752025-05-13
CVE-2025-29839 [MEDIUM] CWE-125 CVE-2025-29839: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-21298CRITICALCVSS 9.8≥ 6.2.9200.0, < 6.2.9200.252732025-01-14
CVE-2025-21298 [CRITICAL] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2018-8481P4LOWCVSS 3.1vr2v(Server Core installation)2018-10-10
CVE-2018-8481 [LOW] CVE-2018-8481: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2018-8482P4LOWCVSS 3.1vr22018-10-10
CVE-2018-8482 [LOW] CVE-2018-8482: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd