Microsoft Windows Server 2012 vulnerabilities

4,005 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

4,005

CISA KEV

150

actively exploited

Public exploits

332

Exploited in wild

207

Severity breakdown

CRITICAL178HIGH2668MEDIUM1104LOW55

Vulnerabilities

SortPage 95 of 201

CVE-2017-0025P3HIGHCVSS 7.8vr22017-03-17

CVE-2017-0025 [HIGH] CVE-2017-0025: The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is diff

nvd

CVE-2022-23284P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.236452022-03-09

CVE-2022-23284 [HIGH] CVE-2022-23284: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2016-3311P3HIGHCVSS 7.8vr22016-08-09

CVE-2016-3311 [HIGH] CVE-2016-3311: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308

nvd

CVE-2022-21838P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11

CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability Windows Cleanup Manager Elevation of Privilege Vulnerability

nvd

CVE-2016-0044P3HIGHCVSS 7.5vr22016-02-10

CVE-2016-0044 [HIGH] CWE-20 CVE-2016-0044: Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote at Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service outage) via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."

nvd

CVE-2024-38064P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38064 [HIGH] CWE-908 CVE-2024-38064: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability

nvd

CVE-2023-41766P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.245232023-10-10

CVE-2023-41766 [HIGH] CWE-426 CVE-2023-41766: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

nvd

CVE-2024-29050P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-29050 [HIGH] CWE-197 CVE-2024-29050: Windows Cryptographic Services Remote Code Execution Vulnerability Windows Cryptographic Services Remote Code Execution Vulnerability

nvd

CVE-2022-37956P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.238652022-09-13

CVE-2022-37956 [HIGH] CVE-2022-37956: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2022-21905P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.235842022-01-11

CVE-2022-21905 [HIGH] CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability

nvd

CVE-2022-34707P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.238172022-08-09

CVE-2022-34707 [HIGH] CWE-416 CVE-2022-34707: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2024-38051P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability

nvd

CVE-2024-30086P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.249192024-06-11

CVE-2024-30086 [HIGH] CWE-416 CVE-2024-30086: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

nvd

CVE-2023-38139P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.244622023-09-12

CVE-2023-38139 [HIGH] CWE-416 CVE-2023-38139: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2024-30095P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.249192024-06-11

CVE-2024-30095 [HIGH] CWE-122 CVE-2024-30095: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2019-1168P3HIGHCVSS 7.8vr2≥ 6.2.0, < publication2019-08-14

CVE-2019-1168 [HIGH] CVE-2019-1168: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploite An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take co

nvd

CVE-2023-36702P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.245232023-10-10

CVE-2023-36702 [HIGH] CWE-94 CVE-2023-36702: Microsoft DirectMusic Remote Code Execution Vulnerability Microsoft DirectMusic Remote Code Execution Vulnerability

nvd

CVE-2024-38249P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.250732024-09-10

CVE-2024-38249 [HIGH] CWE-416 CVE-2024-38249: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2024-49079P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.252222024-12-12

CVE-2024-49079 [HIGH] CWE-416 CVE-2024-49079: Input Method Editor (IME) Remote Code Execution Vulnerability Input Method Editor (IME) Remote Code Execution Vulnerability

nvd

CVE-2019-0620P3HIGHCVSS 7.6vr2≥ 6.2.9200.0, < publication2019-06-12

CVE-2019-0620 [HIGH] CWE-20 CVE-2019-0620: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary

nvd

← Previous95 / 201Next →