Microsoft Windows Server 2012 vulnerabilities

5,227 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,227

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1416LOW55

Vulnerabilities

SortPage 64 of 262

CVE-2026-20848P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13

CVE-2026-20848 [HIGH] CWE-362 CVE-2026-20848: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-20934P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13

CVE-2026-20934 [HIGH] CWE-362 CVE-2026-20934: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-72954P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-72954 [HIGH] CWE-416 CVE-2026-72954: Use after free in Windows Deployment Services allows an authorized attacker to execute code over a n Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

nvd

CVE-2026-62813P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-62813 [HIGH] CWE-416 CVE-2026-62813: Use after free in Active Directory Domain Services allows an authorized attacker to execute code ove Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.

nvd

CVE-2026-72943P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-72943 [HIGH] CWE-416 CVE-2026-72943: Use after free in Windows Deployment Services allows an authorized attacker to execute code over a n Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

nvd

CVE-2020-1061P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < publication2020-05-21

CVE-2020-1061 [HIGH] CWE-787 CVE-2020-1061: A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles ob A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current

nvd

CVE-2020-1339P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2020-08-17

CVE-2020-1339 [HIGH] CVE-2020-1339: A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objec A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user

nvd

CVE-2026-69761P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-69761 [HIGH] CWE-416 CVE-2026-69761: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-58531P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-58531 [HIGH] CWE-362 CVE-2026-58531: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2022-24492P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15

CVE-2022-24492 [HIGH] CVE-2022-24492: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

CVE-2020-1113P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < publication2020-05-21

CVE-2020-1113 [HIGH] CWE-295 CVE-2020-1113: A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with

nvd

CVE-2019-1006P3HIGHCVSS 7.5vr22019-07-15

CVE-2019-1006 [HIGH] CWE-295 CVE-2019-1006: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

nvd

CVE-2022-38045P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.239202022-10-11

CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability Windows Server Service Elevation of Privilege Vulnerability

nvd

CVE-2022-34734P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34734 [HIGH] CVE-2022-34734: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2022-34727P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34727 [HIGH] CVE-2022-34727: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2022-34732P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34732 [HIGH] CVE-2022-34732: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2022-34730P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34730 [HIGH] CVE-2022-34730: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2022-34726P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-34726 [HIGH] CVE-2022-34726: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2022-23253P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09

CVE-2022-23253 [MEDIUM] CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

nvd

CVE-2021-34497P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.234092021-07-14

CVE-2021-34497 [HIGH] CVE-2021-34497: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability

nvd

← Previous64 / 262Next →