Microsoft Windows Server 2012 vulnerabilities

5,221 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,221

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3496MEDIUM1416LOW55

Vulnerabilities

SortPage 29 of 262

CVE-2017-8528P3HIGHCVSS 8.8vr22017-06-15

CVE-2017-8528 [HIGH] CVE-2017-8528: Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Uniscribe Remote Code Execu

nvd

CVE-2016-0098P2HIGHCVSS 8.8vr22016-03-09

CVE-2016-0098 [HIGH] CWE-20 CVE-2016-0098: Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."

nvd

CVE-2026-20868P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13

CVE-2026-20868 [HIGH] CWE-122 CVE-2026-20868: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2016-3228P3HIGHCVSS 8.8vr22016-06-16

CVE-2016-3228 [HIGH] CWE-20 CVE-2016-3228: Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authen Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request, aka "Windows Netlogon Memory Corruption Remote Code Execution Vulnerability."

nvd

CVE-2026-25177P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10

CVE-2026-25177 [HIGH] CWE-641 CVE-2026-25177: Improper restriction of names for files and other resources in Active Directory Domain Services allo Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2019-0902P3HIGHCVSS 8.8vr22019-05-16

CVE-2019-0902 [HIGH] CVE-2019-0902: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE

nvd

CVE-2018-8332P3HIGHCVSS 8.8v(Server Core installation)2018-09-13

CVE-2018-8332 [HIGH] CVE-2018-8332: A remote code execution vulnerability exists when the Windows font library improperly handles specia A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows

nvd

CVE-2017-8527P3HIGHCVSS 8.8vr22017-06-15

CVE-2017-8527 [HIGH] CWE-119 CVE-2017-8527: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics Remote Code Execution Vulnerability".

nvd

CVE-2026-108467P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-108467 [HIGH] CWE-122 CVE-2026-108467: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to e Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

nvd

CVE-2026-88136P2HIGHCVSS 8.8≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-88136 [HIGH] CWE-41 CVE-2026-88136: Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

nvd

CVE-2026-69547P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-69547 [HIGH] CWE-122 CVE-2026-69547: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

nvd

CVE-2026-62790P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11

CVE-2026-62790 [HIGH] CWE-122 CVE-2026-62790: Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

nvd

CVE-2026-62800P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11

CVE-2026-62800 [HIGH] CWE-122 CVE-2026-62800: Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

nvd

CVE-2026-88165P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-88165 [HIGH] CWE-787 CVE-2026-88165: Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute cod Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

nvd

CVE-2026-85931P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-85931 [HIGH] CWE-122 CVE-2026-85931: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

nvd

CVE-2016-0184P3HIGHCVSS 8.8vr22016-05-11

CVE-2016-0184 [HIGH] CVE-2016-0184: Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 S Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Direct3D Use After Free Vulnerability."

nvd

CVE-2018-1004P3HIGHCVSS 8.8vr2v(Server Core installation)2018-04-12

CVE-2018-1004 [HIGH] CWE-787 CVE-2018-1004: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Internet Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.

nvd

CVE-2015-1756P3CRITICALCVSS 9.3vr22015-06-10

CVE-2015-1756 [CRITICAL] CWE-416 CVE-2015-1756: Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Se Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Develope

nvd

CVE-2026-50502P2HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-50502 [HIGH] CWE-1220 CVE-2026-50502: Insufficient granularity of access control in Windows Event Logging Service allows an authorized att Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

nvd

CVE-2019-0793P3HIGHCVSS 8.8vr22019-04-09

CVE-2019-0793 [HIGH] CVE-2019-0793: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.

nvd

← Previous29 / 262Next →