Microsoft Windows Server 2012 vulnerabilities

4,005 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

4,005

CISA KEV

150

actively exploited

Public exploits

332

Exploited in wild

207

Severity breakdown

CRITICAL178HIGH2668MEDIUM1104LOW55

Vulnerabilities

SortPage 92 of 201

CVE-2026-50308P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-50308 [HIGH] CWE-122 CVE-2026-50308: Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute co Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-47996P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08

CVE-2025-47996 [HIGH] CWE-125 CVE-2025-47996: Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-48816P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08

CVE-2025-48816 [HIGH] CWE-125 CVE-2025-48816: Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileg Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2022-41118P3HIGHCVSS 7.5vr22022-11-09

CVE-2022-41118 [HIGH] CWE-362 CVE-2022-41118: Windows Scripting Languages Remote Code Execution Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability

nvd

CVE-2026-58609P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-58609 [HIGH] CWE-125 CVE-2026-58609: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code l Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

nvd

CVE-2024-26248P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26248 [HIGH] CWE-303 CVE-2024-26248: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2025-49742P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255732025-07-08

CVE-2025-49742 [HIGH] CWE-122 CVE-2025-49742: Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to exec Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

nvd

CVE-2023-32022P3HIGHCVSS 7.6vr22023-06-14

CVE-2023-32022 [HIGH] CWE-285 CVE-2023-32022: Windows Server Service Security Feature Bypass Vulnerability Windows Server Service Security Feature Bypass Vulnerability

nvd

CVE-2024-38239P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.250732024-09-10

CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2026-50673P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.262262026-07-14

CVE-2026-50673 [HIGH] CWE-367 CVE-2026-50673: Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges local Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2023-28232P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.242162023-04-11

CVE-2023-28232 [HIGH] CWE-362 CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

nvd

CVE-2024-26234MEDIUMCVSS 6.7Exploited≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26234 [MEDIUM] CWE-284 Proxy Driver Spoofing Vulnerability Proxy Driver Spoofing Vulnerability Proxy Driver Spoofing Vulnerability

cvelistv5

CVE-2024-38198P3HIGHCVSS 7.5fixed in 6.2.9200.25031vr2+1 more2024-08-13

CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2016-3221P3HIGHCVSS 7.8vr22016-06-16

CVE-2016-3221 [HIGH] CVE-2016-3221: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3218.

nvd

CVE-2024-43456P3HIGHCVSS 7.4vr2≥ 6.2.9200.0, < 6.2.9200.251182024-10-08

CVE-2024-43456 [HIGH] CWE-284 CVE-2024-43456: Windows Remote Desktop Services Tampering Vulnerability Windows Remote Desktop Services Tampering Vulnerability

nvd

CVE-2026-35416P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.260792026-05-12

CVE-2026-35416 [HIGH] CWE-416 CVE-2026-35416: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2023-33163P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.243742023-07-11

CVE-2023-33163 [HIGH] CWE-591 CVE-2023-33163: Windows Network Load Balancing Remote Code Execution Vulnerability Windows Network Load Balancing Remote Code Execution Vulnerability

nvd

CVE-2025-62213P3HIGHCVSS 7.0vr2≥ 6.2.9200.0, < 6.2.9200.257682025-11-11

CVE-2025-62213 [HIGH] CWE-416 CVE-2025-62213: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-21235P3HIGHCVSS 7.3vr2≥ 6.2.9200.0, < 6.2.9200.259232026-02-10

CVE-2026-21235 [HIGH] CWE-416 CVE-2026-21235: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54911P3HIGHCVSS 7.3vr2≥ 6.2.9200.0, < 6.2.9200.256752025-09-09

CVE-2025-54911 [HIGH] CWE-416 CVE-2025-54911: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

nvd

← Previous92 / 201Next →