Microsoft Windows Server 2012 R2 vulnerabilities
4,049 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,049
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2835MEDIUM1020LOW12
Vulnerabilities
Page 116 of 203
CVE-2025-32707P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-32707 [HIGH] CWE-125 CVE-2025-32707: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2021-42285P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.201742021-11-10
CVE-2021-42285 [HIGH] CWE-269 CVE-2021-42285: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-31953P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.20045≥ 6.3.0, < 6.3.9600.200442021-06-08
CVE-2021-31953 [HIGH] CVE-2021-31953: Windows Filter Manager Elevation of Privilege Vulnerability
Windows Filter Manager Elevation of Privilege Vulnerability
nvd
CVE-2021-43223P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.202072021-12-15
CVE-2021-43223 [HIGH] CVE-2021-43223: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2021-40467P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201442021-10-13
CVE-2021-40467 [HIGH] CWE-269 CVE-2021-40467: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-37984P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37984 [HIGH] CVE-2022-37984: Windows WLAN Service Elevation of Privilege Vulnerability
Windows WLAN Service Elevation of Privilege Vulnerability
nvd
CVE-2022-33670P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-33670 [HIGH] CVE-2022-33670: Windows Partition Management Driver Elevation of Privilege Vulnerability
Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-44680P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.207212022-12-13
CVE-2022-44680 [HIGH] CVE-2022-44680: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-35342P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35342 [HIGH] CWE-59 CVE-2023-35342: Windows Image Acquisition Elevation of Privilege Vulnerability
Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2023-35312P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35312 [HIGH] CWE-190 CVE-2023-35312: Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
nvd
CVE-2021-41377P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.201742021-11-10
CVE-2021-41377 [HIGH] CWE-269 CVE-2021-41377: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21754P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.207782023-01-10
CVE-2023-21754 [HIGH] CWE-190 CVE-2023-21754: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-54894P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227742025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2026-20816P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.229682026-01-13
CVE-2026-20816 [HIGH] CWE-367 CVE-2026-20816: Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-30031P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.219722024-05-14
CVE-2024-30031 [HIGH] CWE-416 CVE-2024-30031: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
nvd
CVE-2023-28236P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28236 [HIGH] CWE-591 CVE-2023-28236: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-49129P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49129 [HIGH] CWE-400 CVE-2024-49129: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
nvd
CVE-2024-26232P3HIGHCVSS 7.3≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26232 [HIGH] CWE-843 CVE-2024-26232: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2026-40414P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-40414 [HIGH] CWE-476 CVE-2026-40414: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
cvelistv5nvd
CVE-2025-50159P3HIGHCVSS 7.3≥ 6.3.9600.0, < 6.3.9600.227252025-08-12
CVE-2025-50159 [HIGH] CWE-416 CVE-2025-50159: Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker
Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
nvd