Microsoft Windows Server 2012 vulnerabilities

5,227 known vulnerabilities affecting microsoft/windows_server_2012.

Total CVEs

5,227

CISA KEV

153

actively exploited

Public exploits

333

Exploited in wild

212

Severity breakdown

CRITICAL254HIGH3502MEDIUM1416LOW55

Vulnerabilities

SortPage 99 of 262

CVE-2025-32713P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.255222025-06-10

CVE-2025-32713 [HIGH] CWE-122 CVE-2025-32713: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-30015P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.248682024-05-14

CVE-2024-30015 [HIGH] CWE-197 CVE-2024-30015: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2024-30029P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.248682024-05-14

CVE-2024-30029 [HIGH] CWE-197 CVE-2024-30029: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2024-30014P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.248682024-05-14

CVE-2024-30014 [HIGH] CWE-197 CVE-2024-30014: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2026-25181P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10

CVE-2026-25181 [HIGH] CWE-125 CVE-2026-25181: Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a ne Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2024-26195P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26195 [HIGH] CWE-122 CVE-2024-26195: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability

nvd

CVE-2024-26202P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09

CVE-2024-26202 [HIGH] CWE-122 CVE-2024-26202: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability

nvd

CVE-2019-1246P3HIGHCVSS 7.8vr22019-09-11

CVE-2019-1246 [HIGH] CVE-2019-1246: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

nvd

CVE-2024-38044P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38044 [HIGH] CWE-197 CVE-2024-38044: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability

nvd

CVE-2016-3342P3HIGHCVSS 7.8vr22016-11-10

CVE-2016-3342 [HIGH] CVE-2016-3342: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of

nvd

CVE-2016-3340P3HIGHCVSS 7.8vr22016-11-10

CVE-2016-3340 [HIGH] CVE-2016-3340: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of

nvd

CVE-2016-3343P3HIGHCVSS 7.8vr22016-11-10

CVE-2016-3343 [HIGH] CVE-2016-3343: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of

nvd

CVE-2026-32183P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14

CVE-2026-32183 [HIGH] CWE-77 CVE-2026-32183: Improper neutralization of special elements used in a command ('command injection') in Windows Snipp Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-83655P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-83655 [HIGH] CWE-125 CVE-2026-83655: Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service ov Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-70082P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-70082 [HIGH] CWE-248 CVE-2026-70082: Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

nvd

CVE-2024-38028P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38028 [HIGH] CWE-125 CVE-2024-38028: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

nvd

CVE-2024-38025P3HIGHCVSS 7.2vr2≥ 6.2.9200.0, < 6.2.9200.249752024-07-09

CVE-2024-38025 [HIGH] CWE-122 CVE-2024-38025: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

nvd

CVE-2026-100215P3HIGHCVSS 7.8vr22026-10-13

CVE-2026-100215 [HIGH] CWE-122 CVE-2026-100215: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-96911P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-96911 [HIGH] CWE-59 CVE-2026-96911: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-88133P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13

CVE-2026-88133 [HIGH] CWE-59 CVE-2026-88133: Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker t Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

nvd

← Previous99 / 262Next →