Microsoft Windows Server 2012 vulnerabilities
5,221 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,221
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3496MEDIUM1416LOW55
Vulnerabilities
Page 44 of 262
CVE-2022-21881P3HIGHCVSS 7.8vr22022-01-11
CVE-2022-21881 [HIGH] CWE-362 CVE-2022-21881: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-26230P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2021-1666P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1666 [HIGH] CVE-2021-1666: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1658P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1658 [HIGH] CVE-2021-1658: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1660P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1660 [HIGH] CVE-2021-1660: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1664P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1664 [HIGH] CVE-2021-1664: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1671P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1671 [HIGH] CVE-2021-1671: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1673P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2021-01-12
CVE-2021-1673 [HIGH] CVE-2021-1673: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-26881P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.232982021-03-11
CVE-2021-26881 [HIGH] CVE-2021-26881: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2022-21922P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11
CVE-2022-21922 [HIGH] CVE-2022-21922: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2025-50177P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12
CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2015-0078P3HIGHCVSS 7.2PoCvr22015-03-11
CVE-2015-0078 [HIGH] CWE-264 CVE-2015-0078: win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate the token of a calling thread, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
nvd
CVE-2015-1644P3HIGHCVSS 7.2PoCvr22015-04-14
CVE-2015-1644 [HIGH] CWE-264 CVE-2015-1644: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows MS-DOS Device Name Vulnerability."
nvd
CVE-2021-31194P3HIGHCVSS 8.8vr2≥ 6.2.0, < 6.2.9200.233472021-05-11
CVE-2021-31194 [HIGH] CVE-2021-31194: OLE Automation Remote Code Execution Vulnerability
OLE Automation Remote Code Execution Vulnerability
nvd
CVE-2022-23294P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09
CVE-2022-23294 [HIGH] CVE-2022-23294: Windows Event Tracing Remote Code Execution Vulnerability
Windows Event Tracing Remote Code Execution Vulnerability
nvd
CVE-2021-42275P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.235172021-11-10
CVE-2021-42275 [HIGH] CVE-2021-42275: Microsoft COM for Windows Remote Code Execution Vulnerability
Microsoft COM for Windows Remote Code Execution Vulnerability
nvd
CVE-2025-21410P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.253172025-02-11
CVE-2025-21410 [HIGH] CWE-122 CVE-2025-21410: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21208P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.253172025-02-11
CVE-2025-21208 [HIGH] CWE-122 CVE-2025-21208: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49104P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.252222024-12-12
CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49102P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.252222024-12-12
CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd