cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,059 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,059
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL179HIGH2842MEDIUM1026LOW12

Vulnerabilities

Page 11 of 203
CVE-2021-26894P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.199682021-03-11
CVE-2021-26894 [CRITICAL] CVE-2021-26894: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-36936P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.200942021-08-12
CVE-2021-36936 [CRITICAL] CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability Windows Print Spooler Remote Code Execution Vulnerability
nvd
CVE-2026-44815P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-44815 [CRITICAL] CWE-121 CVE-2026-44815: Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code o Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62878P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-62878 [CRITICAL] CWE-121 CVE-2026-62878: Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a ne Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85806P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85806 [CRITICAL] CWE-121 CVE-2026-85806: Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-84015P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-84015 [CRITICAL] CWE-122 CVE-2026-84015: Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthor Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-53143P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12
CVE-2025-53143 [HIGH] CWE-843 CVE-2025-53143: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53145P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12
CVE-2025-53145 [HIGH] CWE-843 CVE-2025-53145: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53144P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2021-26432P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.200942021-08-12
CVE-2021-26432 [CRITICAL] CVE-2021-26432: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
nvd
CVE-2022-38044P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability Windows CD-ROM File System Driver Remote Code Execution Vulnerability
nvd
CVE-2018-8626P2CRITICALCVSS 9.8v(Server Core installation)2018-12-12
CVE-2018-8626 [CRITICAL] CWE-787 CVE-2018-8626: A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they f A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.
nvd
CVE-2021-34535P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200942021-08-12
CVE-2021-34535 [HIGH] CVE-2021-34535: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2026-49181P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-49181 [CRITICAL] CWE-191 CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2021-26893P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.199682021-03-11
CVE-2021-26893 [CRITICAL] CVE-2021-26893: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2026-72982P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-72982 [CRITICAL] CWE-121 CVE-2026-72982: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-33071P2HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.226202025-06-10
CVE-2025-33071 [HIGH] CWE-416 CVE-2025-33071: Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73025P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-73025 [CRITICAL] CWE-1390 CVE-2026-73025: Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21769P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
← Previous11 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase