Microsoft Windows Server 2012 vulnerabilities
5,221 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,221
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3496MEDIUM1416LOW55
Vulnerabilities
Page 31 of 262
CVE-2026-69845P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69845 [CRITICAL] CWE-20 CVE-2026-69845: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2018-0751P3HIGHCVSS 7.1PoCvr22018-01-04
CVE-2018-0751 [HIGH] CWE-269 CVE-2018-0751: The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CV
nvd
CVE-2019-0794P3HIGHCVSS 8.8vr22019-04-09
CVE-2019-0794 [HIGH] CVE-2019-0794: A remote code execution vulnerability exists when OLE automation improperly handles objects in memor
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.
nvd
CVE-2026-69491P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69491 [CRITICAL] CWE-122 CVE-2026-69491: Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execu
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73009P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-73009 [CRITICAL] CWE-416 CVE-2026-73009: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69276P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69276 [CRITICAL] CWE-122 CVE-2026-69276: Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78445P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-78445 [CRITICAL] CWE-416 CVE-2026-78445: Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69730P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69730 [CRITICAL] CWE-416 CVE-2026-69730: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69595P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69595 [CRITICAL] CWE-416 CVE-2026-69595: Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69408P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69408 [CRITICAL] CWE-122 CVE-2026-69408: Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56159P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-56159 [CRITICAL] CWE-122 CVE-2026-56159: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42990P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.261322026-07-14
CVE-2026-42990 [CRITICAL] CWE-122 CVE-2026-42990: Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50518P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50518 [CRITICAL] CWE-122 CVE-2026-50518: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50447P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50447 [CRITICAL] CWE-122 CVE-2026-50447: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83748P2CRITICALCVSS 9.8≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83748 [CRITICAL] CWE-122 CVE-2026-83748: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83935P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83935 [CRITICAL] CWE-122 CVE-2026-83935: Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97815P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-97815 [CRITICAL] CWE-122 CVE-2026-97815: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58594P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-58594 [CRITICAL] CWE-190 CVE-2026-58594: Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50694P2CRITICALCVSS 9.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50694 [CRITICAL] CWE-416 CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2014-4118P3CRITICALCVSS 9.3vr22014-11-11
CVE-2014-4118 [CRITICAL] CWE-94 CVE-2014-4118: XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows S
XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (system-state corruption) via crafted XML cont
nvd