Microsoft Windows Server 2012 R2 vulnerabilities
4,049 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,049
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2835MEDIUM1020LOW12
Vulnerabilities
Page 115 of 203
CVE-2025-27733P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-27733 [HIGH] CWE-125 CVE-2025-27733: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21805P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.208212023-02-14
CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2023-29367P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29367 [HIGH] CWE-908 CVE-2023-29367: iSCSI Target WMI Provider Remote Code Execution Vulnerability
iSCSI Target WMI Provider Remote Code Execution Vulnerability
nvd
CVE-2021-26426P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.200942021-08-12
CVE-2021-26426 [HIGH] CWE-59 CVE-2021-26426: Windows User Account Profile Picture Elevation of Privilege Vulnerability
Windows User Account Profile Picture Elevation of Privilege Vulnerability
nvd
CVE-2023-21691P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.208212023-02-14
CVE-2023-21691 [HIGH] CWE-125 CVE-2023-21691: Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
nvd
CVE-2022-37997P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37997 [HIGH] CVE-2022-37997: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-36705P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.216682023-11-14
CVE-2023-36705 [HIGH] CWE-59 CVE-2023-36705: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2022-37993P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37993 [HIGH] CVE-2022-37993: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-37994P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37994 [HIGH] CVE-2022-37994: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-37999P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37999 [HIGH] CVE-2022-37999: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2021-40443P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201442021-10-13
CVE-2021-40443 [HIGH] CWE-269 CVE-2021-40443: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-40466P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201442021-10-13
CVE-2021-40466 [HIGH] CWE-269 CVE-2021-40466: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-24459P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.203032022-03-09
CVE-2022-24459 [HIGH] CVE-2022-24459: Windows Fax and Scan Service Elevation of Privilege Vulnerability
Windows Fax and Scan Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21834P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21834 [HIGH] CVE-2022-21834: Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-22050P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.204782022-07-12
CVE-2022-22050 [HIGH] CVE-2022-22050: Windows Fax Service Elevation of Privilege Vulnerability
Windows Fax Service Elevation of Privilege Vulnerability
nvd
CVE-2024-21354P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.216682023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd
CVE-2022-21981P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.202692022-02-09
CVE-2022-21981 [HIGH] CVE-2022-21981: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-35820P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-35820 [HIGH] CVE-2022-35820: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-34456P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-16
CVE-2021-34456 [HIGH] CWE-269 CVE-2021-34456: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd