Microsoft Windows Server 2012 vulnerabilities
5,221 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,221
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3496MEDIUM1416LOW55
Vulnerabilities
Page 47 of 262
CVE-2016-3203P3HIGHCVSS 7.8vr22016-06-16
CVE-2016-3203 [HIGH] CWE-20 CVE-2016-3203: Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."
nvd
CVE-2026-73018P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72986P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68828P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62785P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62785 [HIGH] CWE-122 CVE-2026-62785: Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85817P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85817 [HIGH] CWE-807 CVE-2026-85817: Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-49729P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08
CVE-2025-49729 [HIGH] CWE-122 CVE-2025-49729: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88112P3HIGHCVSS 8.8vr22026-10-13
CVE-2026-88112 [HIGH] CWE-822 CVE-2026-88112: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85903P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85903 [HIGH] CWE-822 CVE-2026-85903: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2020-1036P3CRITICALCVSS 9.0vr22020-07-14
CVE-2020-1036 [CRITICAL] CVE-2020-1036: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to pr
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
nvd
CVE-2026-83929P3HIGHCVSS 8.8vr22026-10-13
CVE-2026-83929 [HIGH] CWE-787 CVE-2026-83929: Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62816P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62816 [HIGH] CWE-122 CVE-2026-62816: Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-54982P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-54982 [HIGH] CWE-191 CVE-2026-54982: Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-50370P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50370 [HIGH] CWE-20 CVE-2026-50370: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-34329P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-34329 [HIGH] CWE-122 CVE-2026-34329: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-40403P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12
CVE-2026-40403 [HIGH] CWE-122 CVE-2026-40403: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code lo
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
nvd
CVE-2026-54999P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-54999 [HIGH] CWE-362 CVE-2026-54999: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-69603P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69603 [HIGH] CWE-122 CVE-2026-69603: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2018-8423P3HIGHCVSS 7.8vr2v(Server Core installation)2018-10-10
CVE-2018-8423 [HIGH] CWE-119 CVE-2018-8423: A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JE
A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Wi
nvd
CVE-2016-0038P3HIGHCVSS 7.8vr22016-02-10
CVE-2016-0038 [HIGH] CWE-119 CVE-2016-0038: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Memory Corruption Vulnerability."
nvd