Microsoft Windows Server 2012 vulnerabilities
5,227 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,227
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1416LOW55
Vulnerabilities
Page 58 of 262
CVE-2016-0046P3HIGHCVSS 7.8vr22016-02-10
CVE-2016-0046 [HIGH] CWE-20 CVE-2016-0046: Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remo
Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted Reader file, aka "Microsoft Windows Reader Vulnerability."
nvd
CVE-2018-8345P3HIGHCVSS 7.5vr22018-08-15
CVE-2018-8345 [HIGH] CWE-94 CVE-2018-8345: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execu
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,
nvd
CVE-2017-0293P3HIGHCVSS 7.5vr22017-08-08
CVE-2017-0293 [HIGH] CWE-119 CVE-2017-0293: Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold a
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability".
nvd
CVE-2015-2506P3CRITICALCVSS 9.3vr22015-09-09
CVE-2015-2506 [CRITICAL] CWE-20 CVE-2015-2506: atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2
atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service (system crash) via a crafted OpenType font, aka "OpenType Font Parsing Vulne
nvd
CVE-2026-72987P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72987 [HIGH] CWE-416 CVE-2026-72987: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69813P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69813 [HIGH] CWE-416 CVE-2026-69813: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62889P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11
CVE-2026-62889 [HIGH] CWE-415 CVE-2026-62889: Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to ex
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88171P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-88171 [HIGH] CWE-415 CVE-2026-88171: Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-84012P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-84012 [HIGH] CWE-415 CVE-2026-84012: Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70013P3HIGHCVSS 8.1vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70013 [HIGH] CWE-416 CVE-2026-70013: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68880P3HIGHCVSS 8.0vr22026-09-08
CVE-2026-68880 [HIGH] CWE-122 CVE-2026-68880: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ove
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69346P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69346 [HIGH] CWE-122 CVE-2026-69346: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69643P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69643 [HIGH] CWE-122 CVE-2026-69643: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69371P3HIGHCVSS 8.0vr22026-09-08
CVE-2026-69371 [HIGH] CWE-122 CVE-2026-69371: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69423P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69423 [HIGH] CWE-122 CVE-2026-69423: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69412P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69412 [HIGH] CWE-121 CVE-2026-69412: Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code ove
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
nvd
CVE-2026-50683P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14
CVE-2026-50683 [HIGH] CWE-122 CVE-2026-50683: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2025-21204P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08
CVE-2025-21204 [HIGH] CWE-59 CVE-2025-21204: Improper link resolution before file access ('link following') in Windows Update Stack allows an aut
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
nvd
CVE-2017-8717P3HIGHCVSS 7.8vr22017-10-13
CVE-2017-8717 [HIGH] CWE-119 CVE-2017-8717: The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1
The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution V
nvd
CVE-2026-20921P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20921 [HIGH] CWE-362 CVE-2026-20921: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd