Microsoft Windows Server 2012 vulnerabilities
3,707 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
3,707
CISA KEV
148
actively exploited
Public exploits
290
Exploited in wild
141
Severity breakdown
CRITICAL157HIGH2452MEDIUM1046LOW52
Vulnerabilities
Page 49 of 186
CVE-2024-21429MEDIUMCVSS 6.8vr2≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-21429 [MEDIUM] CWE-197 CVE-2024-21429: Windows USB Hub Driver Remote Code Execution Vulnerability
Windows USB Hub Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21430MEDIUMCVSS 6.4vr2≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-21430 [MEDIUM] CWE-125 CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-26177MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-26177 [MEDIUM] CWE-200 CVE-2024-26177: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-26174MEDIUMCVSS 5.5fixed in 6.2.9200.24768vr2+1 more2024-03-12
CVE-2024-26174 [MEDIUM] CWE-125 CVE-2024-26174: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-26181MEDIUMCVSS 5.5≥ 6.2.9200.0, < 6.2.9200.247682024-03-12
CVE-2024-26181 [MEDIUM] CWE-20 Windows Kernel Denial of Service Vulnerability
Windows Kernel Denial of Service Vulnerability
Windows Kernel Denial of Service Vulnerability
cvelistv5
CVE-2023-50387HIGHCVSS 7.5vr22024-02-14
CVE-2023-50387 [HIGH] CWE-770 CVE-2023-50387: Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow r
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an al
nvd
CVE-2024-21347HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21347 [HIGH] CWE-122 CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21370HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21370 [HIGH] CWE-122 CVE-2024-21370: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21350HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21366HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21366 [HIGH] CWE-122 CVE-2024-21366: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21405HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21405 [HIGH] CWE-591 CVE-2024-21405: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2024-21343HIGHCVSS 7.5vr22024-02-13
CVE-2024-21343 [HIGH] CWE-125 CVE-2024-21343: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2024-21363HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21363 [HIGH] CWE-843 CVE-2024-21363: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-21361HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21361 [HIGH] CWE-122 CVE-2024-21361: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21420HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21420 [HIGH] CWE-190 CVE-2024-21420: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21360HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21360 [HIGH] CWE-122 CVE-2024-21360: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21358HIGHCVSS 8.8fixed in 6.2.9200.24710vr2+1 more2024-02-13
CVE-2024-21358 [HIGH] CWE-122 CVE-2024-21358: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21375HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21375 [HIGH] CWE-416 CVE-2024-21375: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21354HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2024-21391HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13
CVE-2024-21391 [HIGH] CWE-197 CVE-2024-21391: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd