cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

Page 115 of 141
CVE-2025-29974P4MEDIUMCVSS 5.7≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29974 [MEDIUM] CWE-125 CVE-2025-29974: Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-50485P4MEDIUMCVSS 5.7≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2023-35336P4MEDIUMCVSS 5.4≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35336 [MEDIUM] CWE-20 CVE-2023-35336: Windows MSHTML Platform Security Feature Bypass Vulnerability Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2026-57084P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-57084 [MEDIUM] CWE-908 CVE-2026-57084: Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose i Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-57083P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-57083 [MEDIUM] CWE-908 CVE-2026-57083: Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50352P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50352 [MEDIUM] CWE-200 CVE-2026-50352: Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45634P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-45634 [MEDIUM] CWE-125 CVE-2026-45634: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information loca Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32212P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-32212 [MEDIUM] CWE-59 CVE-2026-32212: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50455P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50455 [MEDIUM] CWE-908 CVE-2026-50455: Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-58638P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58638 [MEDIUM] CWE-325 CVE-2026-58638: Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-32214P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45655P4MEDIUMCVSS 5.3≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-24297P4MEDIUMCVSS 4.8≥ 6.3.9600.0, < 6.3.9600.230742026-03-10
CVE-2026-24297 [MEDIUM] CWE-362 CVE-2026-24297: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-35377P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-35376P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-28266P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2023-36909P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-36909 [MEDIUM] CWE-191 CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2021-43224P4MEDIUMCVSS 5.5≥ 6.3.0, < 6.3.9600.202072021-12-15
CVE-2021-43224 [MEDIUM] CVE-2021-43224: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2025-21226P4MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21226 [MEDIUM] CWE-125 CVE-2025-21226: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21260P4MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21260 [MEDIUM] CWE-125 CVE-2025-21260: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
← Previous115 / 141Next →