Microsoft Windows Server 2012 R2 vulnerabilities

4,049 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

4,049

CISA KEV

101

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL182HIGH2835MEDIUM1020LOW12

Vulnerabilities

SortPage 118 of 203

CVE-2026-83685P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-83685 [MEDIUM] CWE-126 CVE-2026-83685: Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a netwo Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

nvd

CVE-2026-70072P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-70072 [MEDIUM] CWE-770 CVE-2026-70072: Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

nvd

CVE-2024-30084P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.220232024-06-11

CVE-2024-30084 [HIGH] CWE-367 CVE-2024-30084: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

nvd

CVE-2026-97819P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97819 [MEDIUM] CWE-125 CVE-2026-97819: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-108127P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-108127 [MEDIUM] CWE-125 CVE-2026-108127: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-108128P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-108128 [MEDIUM] CWE-125 CVE-2026-108128: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-108129P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-108129 [MEDIUM] CWE-125 CVE-2026-108129: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-70025P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-70025 [MEDIUM] CWE-416 CVE-2026-70025: Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

nvd

CVE-2026-84007P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-84007 [MEDIUM] CWE-125 CVE-2026-84007: Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose infor Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-69395P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-69395 [MEDIUM] CWE-134 CVE-2026-69395: Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows a Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-85331P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85331 [MEDIUM] CWE-125 CVE-2026-85331: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97824P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97824 [MEDIUM] CWE-125 CVE-2026-97824: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97827P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97827 [MEDIUM] CWE-125 CVE-2026-97827: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97829P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97829 [MEDIUM] CWE-125 CVE-2026-97829: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97823P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97823 [MEDIUM] CWE-125 CVE-2026-97823: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97821P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97821 [MEDIUM] CWE-125 CVE-2026-97821: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97826P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97826 [MEDIUM] CWE-125 CVE-2026-97826: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97820P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97820 [MEDIUM] CWE-125 CVE-2026-97820: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97822P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97822 [MEDIUM] CWE-125 CVE-2026-97822: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97841P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-97841 [MEDIUM] CWE-125 CVE-2026-97841: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

← Previous118 / 203Next →