cbcvebase.

Microsoft Windows Server 2012 vulnerabilities

5,221 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs
5,221
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3496MEDIUM1416LOW55

Vulnerabilities

Page 26 of 262
CVE-2026-70158P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70158 [HIGH] CWE-415 CVE-2026-70158: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-69628P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69628 [HIGH] CWE-122 CVE-2026-69628: Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a net Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
nvd
CVE-2026-72959P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72959 [HIGH] CWE-122 CVE-2026-72959: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-56647P2HIGHCVSS 8.8vr22026-07-14
CVE-2026-56647 [HIGH] CWE-190 CVE-2026-56647: Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50444P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50444 [HIGH] CWE-306 CVE-2026-50444: Missing authentication for critical function in Windows Server Update Service allows an authorized a Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69681P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69681 [HIGH] CWE-122 CVE-2026-69681: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2017-0062P3MEDIUMCVSS 4.7PoCvr22017-03-17
CVE-2017-0062 [MEDIUM] CVE-2017-0062: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 S The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerabili
nvd
CVE-2020-0964P2HIGHCVSS 8.8vr22020-04-15
CVE-2020-0964 [HIGH] CVE-2020-0964: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface ( A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
nvd
CVE-2018-8349P3HIGHCVSS 8.8vr2v(Server Core installation)2018-08-15
CVE-2018-8349 [HIGH] CWE-502 CVE-2018-8349: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properl A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20
nvd
CVE-2024-26212P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26212 [HIGH] CWE-400 CVE-2024-26212: DHCP Server Service Denial of Service Vulnerability DHCP Server Service Denial of Service Vulnerability
nvd
CVE-2022-34722P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13
CVE-2022-34722 [CRITICAL] CVE-2022-34722: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2023-36910P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-36910 [CRITICAL] CWE-190 CVE-2023-36910: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35385P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-35385 [CRITICAL] CWE-190 CVE-2023-35385: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2022-21894MEDIUMCVSS 4.4ExploitedPoC≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21894 [MEDIUM] Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2023-32057P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-32015P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-32015 [CRITICAL] CWE-20 CVE-2023-32015: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-29363P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-29363 [CRITICAL] CWE-122 CVE-2023-29363: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-32014P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-32014 [CRITICAL] CWE-191 CVE-2023-32014: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-35365P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-36911P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-36911 [CRITICAL] CWE-190 CVE-2023-36911: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
← Previous26 / 262Next →
Microsoft Windows Server 2012 vulnerabilities | cvebase