Microsoft Windows Server 2012 R2 vulnerabilities

2,572 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,572
CISA KEV
96
actively exploited
Public exploits
54
Exploited in wild
85
Severity breakdown
CRITICAL85HIGH1805MEDIUM672LOW10

Vulnerabilities

Page 10 of 129
CVE-2025-58718HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58718 [HIGH] CWE-416 CVE-2025-58718: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
cvelistv5nvd
CVE-2025-58736HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58736 [HIGH] CWE-416 CVE-2025-58736: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59277HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59201HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59282HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59282 [HIGH] CWE-362 CVE-2025-59282: Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59275HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58735HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58735 [HIGH] CWE-416 CVE-2025-58735: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-24052HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-24052 [HIGH] CWE-121 CVE-2025-24052: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Window
cvelistv5nvd
CVE-2025-55335HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-55335 [HIGH] CWE-362 CVE-2025-55335: Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59187HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59196HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59196 [HIGH] CWE-362 CVE-2025-59196: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58737HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58737 [HIGH] CWE-416 CVE-2025-58737: Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59205HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59205 [HIGH] CWE-362 CVE-2025-59205: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55678HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59242HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59242 [HIGH] CWE-122 CVE-2025-59242: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58714HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58714 [HIGH] CWE-284 CVE-2025-58714: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58733HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58733 [HIGH] CWE-416 CVE-2025-58733: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59208HIGHCVSS 7.1≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59208 [HIGH] CWE-125 CVE-2025-59208: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information o Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
cvelistv5nvd
CVE-2025-59295HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
cvelistv5nvd
CVE-2025-58726HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
cvelistv5nvd
← Previous10 / 129Next →