Microsoft Windows Server 2012 vulnerabilities

4,005 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

4,005

CISA KEV

150

actively exploited

Public exploits

332

Exploited in wild

207

Severity breakdown

CRITICAL178HIGH2668MEDIUM1104LOW55

Vulnerabilities

SortPage 82 of 201

CVE-2022-22037P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.237712022-07-12

CVE-2022-22037 [HIGH] CVE-2022-22037: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

nvd

CVE-2021-43233P3HIGHCVSS 7.5vr2≥ 6.2.0, < 6.2.9200.23545+1 more2021-12-15

CVE-2021-43233 [HIGH] CVE-2021-43233: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability

nvd

CVE-2025-26641P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08

CVE-2025-26641 [HIGH] CWE-400 CVE-2025-26641: Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-48573P3HIGHCVSS 7.9vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09

CVE-2026-48573 [HIGH] CWE-1329 CVE-2026-48573: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2026-48576P3HIGHCVSS 7.9vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09

CVE-2026-48576 [HIGH] CWE-1329 CVE-2026-48576: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2022-30142P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.237362022-06-15

CVE-2022-30142 [HIGH] CVE-2022-30142: Windows File History Remote Code Execution Vulnerability Windows File History Remote Code Execution Vulnerability

nvd

CVE-2025-32714P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255222025-06-10

CVE-2025-32714 [HIGH] CWE-284 CVE-2025-32714: Improper access control in Windows Installer allows an authorized attacker to elevate privileges loc Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2022-21983P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15

CVE-2022-21983 [HIGH] CVE-2022-21983: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability

nvd

CVE-2017-11788P3HIGHCVSS 7.5vr22017-11-15

CVE-2017-11788 [HIGH] CVE-2017-11788: Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to i

nvd

CVE-2025-21389P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.252732025-01-14

CVE-2025-21389 [HIGH] CWE-400 CVE-2025-21389: Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an un Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

nvd

CVE-2022-24534P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15

CVE-2022-24534 [HIGH] CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability

nvd

CVE-2025-27727P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.254232025-04-08

CVE-2025-27727 [HIGH] CWE-59 CVE-2025-27727: Improper link resolution before file access ('link following') in Windows Installer allows an author Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-38061P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38061 [HIGH] CWE-284 CVE-2024-38061: DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

nvd

CVE-2024-21347P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.247102024-02-13

CVE-2024-21347 [HIGH] CWE-122 CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability

nvd

CVE-2023-35352P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11

CVE-2023-35352 [HIGH] CWE-693 CVE-2023-35352: Windows Remote Desktop Security Feature Bypass Vulnerability Windows Remote Desktop Security Feature Bypass Vulnerability

nvd

CVE-2024-37982P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.251182024-10-08

CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

nvd

CVE-2026-47656P3HIGHCVSS 7.9vr2≥ 6.2.9200.0, < 6.2.9200.261322026-06-09

CVE-2026-47656 [HIGH] CWE-693 CVE-2026-47656: Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a secur Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2025-60709P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.257682025-11-11

CVE-2025-60709 [HIGH] CWE-125 CVE-2025-60709: Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53132P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.256222025-08-12

CVE-2025-53132 [HIGH] CWE-362 CVE-2025-53132: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-32712P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255222025-06-10

CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

← Previous82 / 201Next →