Microsoft Windows Server 2012 vulnerabilities
5,227 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,227
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1416LOW55
Vulnerabilities
Page 78 of 262
CVE-2026-70004P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70004 [HIGH] CWE-416 CVE-2026-70004: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69996P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69996 [HIGH] CWE-416 CVE-2026-69996: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70012P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70012 [HIGH] CWE-416 CVE-2026-70012: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69976P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69976 [HIGH] CWE-416 CVE-2026-69976: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69986P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69986 [HIGH] CWE-416 CVE-2026-69986: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69997P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69997 [HIGH] CWE-416 CVE-2026-69997: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2020-1255P3HIGHCVSS 8.8vr22020-06-09
CVE-2020-1255 [HIGH] CVE-2020-1255: An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Serv
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
nvd
CVE-2023-28227P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28227 [HIGH] CWE-122 CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability
Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2020-0995P3HIGHCVSS 7.8vr22020-04-15
CVE-2020-0995 [HIGH] CVE-2020-0995: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0999, CVE-2020-1008.
nvd
CVE-2026-83511P3HIGHCVSS 7.4vr22026-10-13
CVE-2026-83511 [HIGH] CWE-1390 CVE-2026-83511: Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2019-1241P3HIGHCVSS 7.8vr22019-09-11
CVE-2019-1241 [HIGH] CVE-2019-1241: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.
nvd
CVE-2023-36900P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21549P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21549 [HIGH] CWE-285 CVE-2023-21549: Windows SMB Witness Service Elevation of Privilege Vulnerability
Windows SMB Witness Service Elevation of Privilege Vulnerability
nvd
CVE-2023-28275P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21732P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21732 [HIGH] CWE-121 CVE-2023-21732: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21681P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.240752023-01-10
CVE-2023-21681 [HIGH] CWE-191 CVE-2023-21681: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-35359P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.244142023-08-08
CVE-2023-35359 [HIGH] CWE-23 CVE-2023-35359: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-29372P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.243142023-06-14
CVE-2023-29372 [HIGH] CWE-122 CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32038P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11
CVE-2023-32038 [HIGH] CWE-416 CVE-2023-32038: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21797P3HIGHCVSS 8.8vr2≥ 6.2.9200.0, < 6.2.9200.241162023-02-14
CVE-2023-21797 [HIGH] CWE-190 CVE-2023-21797: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd