Microsoft Windows Server 2012 R2 vulnerabilities
4,049 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,049
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2835MEDIUM1020LOW12
Vulnerabilities
Page 113 of 203
CVE-2020-0911P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-09-11
CVE-2020-0911 [HIGH] CVE-2020-0911: <p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles
An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
The update addresses the vulner
nvd
CVE-2020-17092P3HIGHCVSS 7.8≥ 6.3.9600.0, < publication2020-12-10
CVE-2020-17092 [HIGH] CVE-2020-17092: Windows Network Connections Service Elevation of Privilege Vulnerability
Windows Network Connections Service Elevation of Privilege Vulnerability
nvd
CVE-2021-34537P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.200942021-08-12
CVE-2021-34537 [HIGH] CWE-269 CVE-2021-34537: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-0838P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-09-11
CVE-2020-0838 [HIGH] CVE-2020-0838: <p>An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker wh
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.
The sec
nvd
CVE-2020-1079P3HIGHCVSS 7.8≥ 6.3.9600.0, < publication2020-05-21
CVE-2020-1079 [HIGH] CVE-2020-1079: An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in
An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first
nvd
CVE-2020-1010P3HIGHCVSS 7.8≥ 6.3.9600.0, < publication2020-05-21
CVE-2020-1010 [HIGH] CVE-2020-1010: An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengin
An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.
To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affecte
nvd
CVE-2020-1486P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-08-17
CVE-2020-1486 [HIGH] CVE-2020-1486: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a
nvd
CVE-2021-26899P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.199682021-03-11
CVE-2021-26899 [HIGH] CVE-2021-26899: Windows UPnP Device Host Elevation of Privilege Vulnerability
Windows UPnP Device Host Elevation of Privilege Vulnerability
nvd
CVE-2020-1114P3HIGHCVSS 7.8≥ 6.3.9600.0, < publication2020-05-21
CVE-2020-1114 [HIGH] CVE-2020-1114: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a
nvd
CVE-2020-1081P3HIGHCVSS 7.8≥ 6.3.9600.0, < publication2020-05-21
CVE-2020-1081 [HIGH] CWE-20 CVE-2020-1081: An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers. An authenticated attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges.
To exploit this vulnerability, an attacker would first have to log on to the system
nvd
CVE-2019-1164P3HIGHCVSS 7.8≥ 6.3.0, < publication2019-08-14
CVE-2019-1164 [HIGH] CWE-1260 CVE-2019-1164: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnera
nvd
CVE-2020-17026P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17026 [HIGH] CVE-2020-17026: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2023-36710P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.216202023-10-10
CVE-2023-36710 [HIGH] CWE-197 CVE-2023-36710: Windows Media Foundation Core Remote Code Execution Vulnerability
Windows Media Foundation Core Remote Code Execution Vulnerability
nvd
CVE-2020-17034P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17034 [HIGH] CVE-2020-17034: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17031P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17031 [HIGH] CVE-2020-17031: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17027P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17027 [HIGH] CVE-2020-17027: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-16887P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-10-16
CVE-2020-16887 [HIGH] CVE-2020-16887: <p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Se
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update ad
nvd
CVE-2020-17025P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17025 [HIGH] CVE-2020-17025: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17033P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17033 [HIGH] CVE-2020-17033: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17032P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-11-11
CVE-2020-17032 [HIGH] CVE-2020-17032: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd