Microsoft Windows Server 2012 vulnerabilities
5,221 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,221
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3496MEDIUM1416LOW55
Vulnerabilities
Page 28 of 262
CVE-2026-69768P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69768 [CRITICAL] CWE-122 CVE-2026-69768: Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69463P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69463 [CRITICAL] CWE-122 CVE-2026-69463: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a ne
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62893P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62893 [CRITICAL] CWE-416 CVE-2026-62893: Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-65791P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-65791 [CRITICAL] CWE-122 CVE-2026-65791: Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-27740P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-27740 [HIGH] CWE-1390 CVE-2025-27740: Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker t
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69886P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69886 [CRITICAL] CWE-122 CVE-2026-69886: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69883P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69883 [CRITICAL] CWE-416 CVE-2026-69883: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96934P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96934 [CRITICAL] CWE-416 CVE-2026-96934: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2018-8134P3HIGHCVSS 7.0PoCvr22018-05-09
CVE-2018-8134 [HIGH] CVE-2018-8134: An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permi
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
nvd
CVE-2015-1699P3CRITICALCVSS 9.3vr22015-05-13
CVE-2015-1699 [CRITICAL] CVE-2015-1699: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-169
nvd
CVE-2015-1695P3CRITICALCVSS 9.3vr22015-05-13
CVE-2015-1695 [CRITICAL] CVE-2015-1695: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-169
nvd
CVE-2015-1675P3CRITICALCVSS 9.3vr22015-05-13
CVE-2015-1675 [CRITICAL] CWE-94 CVE-2015-1675: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1695, CVE-2
nvd
CVE-2019-0795P3HIGHCVSS 8.8vr22019-04-09
CVE-2019-0795 [HIGH] CVE-2019-0795: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.
nvd
CVE-2026-57090P2CRITICALCVSS 9.8vr22026-07-14
CVE-2026-57090 [CRITICAL] CWE-122 CVE-2026-57090: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-26670P2HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-26670 [HIGH] CWE-416 CVE-2025-26670: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57089P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-57089 [CRITICAL] CWE-416 CVE-2026-57089: Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized at
Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96096P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96096 [CRITICAL] CWE-122 CVE-2026-96096: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96864P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96864 [CRITICAL] CWE-415 CVE-2026-96864: Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85928P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85928 [CRITICAL] CWE-122 CVE-2026-85928: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-44666P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.240182022-12-13
CVE-2022-44666 [HIGH] CVE-2022-44666: Windows Contacts Remote Code Execution Vulnerability
Windows Contacts Remote Code Execution Vulnerability
nvd