Microsoft Windows Server 2012 vulnerabilities

5,227 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,227

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1416LOW55

Vulnerabilities

SortPage 69 of 262

CVE-2026-83767P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83767 [HIGH] CWE-121 CVE-2026-83767: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85867P3HIGHCVSS 7.8vr22026-10-13

CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2021-40469P3HIGHCVSS 7.2vr2≥ 6.2.0, < 6.2.9200.234902021-10-13

CVE-2021-40469 [HIGH] CVE-2021-40469: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability

nvd

CVE-2026-69793P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

nvd

CVE-2026-62787P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.262802026-08-11

CVE-2026-62787 [HIGH] CWE-416 CVE-2026-62787: Use after free in Windows DNS allows an authorized attacker to execute code over a network. Use after free in Windows DNS allows an authorized attacker to execute code over a network.

nvd

CVE-2026-50685P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-50685 [HIGH] CWE-415 CVE-2026-50685: Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.

nvd

CVE-2026-96071P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-69706P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2022-24502P3MEDIUMCVSS 6.5vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09

CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability

nvd

CVE-2020-1508P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2020-09-11

CVE-2020-1508 [HIGH] CVE-2020-1508: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user

nvd

CVE-2020-1400P3HIGHCVSS 7.8vr22020-07-14

CVE-2020-1400 [HIGH] CWE-191 CVE-2020-1400: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.

nvd

CVE-2026-78446P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08

CVE-2026-78446 [HIGH] CWE-416 CVE-2026-78446: Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute cod Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

nvd

CVE-2026-85798P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

nvd

CVE-2020-1593P3HIGHCVSS 8.8vr2≥ 6.2.0, < publication2020-09-11

CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user

nvd

CVE-2019-0580P3HIGHCVSS 7.8vr22019-01-08

CVE-2019-0580 [HIGH] CVE-2019-0580: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008

nvd

CVE-2019-0579P3HIGHCVSS 7.8vr22019-01-08

CVE-2019-0579 [HIGH] CVE-2019-0579: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008

nvd

CVE-2019-0577P3HIGHCVSS 7.8vr22019-01-08

CVE-2019-0577 [HIGH] CVE-2019-0577: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008

nvd

CVE-2022-21920P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11

CVE-2022-21920 [HIGH] CVE-2022-21920: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2022-22019P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.237142022-05-10

CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

CVE-2022-24528P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15

CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

← Previous69 / 262Next →