Microsoft Windows Server 2012 R2 vulnerabilities
2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12
Vulnerabilities
Page 118 of 141
CVE-2026-50456P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50456 [MEDIUM] CWE-200 CVE-2026-50456: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32084P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-32084 [MEDIUM] CWE-200 CVE-2026-32084: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2025-21247P4MEDIUMCVSS 4.3≥ 6.3.9600.0, < 6.3.9600.224702025-03-11
CVE-2025-21247 [MEDIUM] CWE-41 CVE-2025-21247: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-24080P4MEDIUMCVSS 6.5≥ 6.3.0, < publication2021-02-25
CVE-2021-24080 [MEDIUM] CVE-2021-24080: Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
nvd
CVE-2026-21249P4LOWCVSS 3.3≥ 6.3.9600.0, < 6.3.9600.230222026-02-10
CVE-2026-21249 [LOW] CWE-73 CVE-2026-21249: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2023-38254P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-38254 [MEDIUM] CWE-20 CVE-2023-38254: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2018-8434P4MEDIUMCVSS 5.4v(Server Core installation)2018-09-13
CVE-2018-8434 [MEDIUM] CWE-20 CVE-2018-8434: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Wind
nvd
CVE-2025-21272P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21272 [MEDIUM] CWE-908 CVE-2025-21272: Windows COM Server Information Disclosure Vulnerability
Windows COM Server Information Disclosure Vulnerability
nvd
CVE-2025-21288P4MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21288 [MEDIUM] CWE-908 CVE-2025-21288: Windows COM Server Information Disclosure Vulnerability
Windows COM Server Information Disclosure Vulnerability
nvd
CVE-2018-8565P4MEDIUMCVSS 5.5v(Server Core installation)2018-11-14
CVE-2018-8565 [MEDIUM] CWE-200 CVE-2018-8565: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Ser
nvd
CVE-2018-8307P4MEDIUMCVSS 5.3v(Server Core installation)2018-07-11
CVE-2018-8307 [MEDIUM] CVE-2018-8307: A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OL
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
nvd
CVE-2018-8271P4MEDIUMCVSS 5.5v(Server Core installation)2018-09-13
CVE-2018-8271 [MEDIUM] CWE-200 CVE-2018-8271: An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode dr
An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka "Windows Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv
nvd
CVE-2024-21344P4MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21344 [MEDIUM] CWE-125 CVE-2024-21344: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2022-35747P4MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35747 [MEDIUM] CVE-2022-35747: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
nvd
CVE-2024-38099P4MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38099 [MEDIUM] CWE-287 CVE-2024-38099: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
nvd
CVE-2025-29957P4MEDIUMCVSS 6.2≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29957 [MEDIUM] CWE-400 CVE-2025-29957: Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to
Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.
nvd
CVE-2018-0887P4MEDIUMCVSS 5.5v(Server Core installation)2018-04-12
CVE-2018-0887 [MEDIUM] CWE-665 CVE-2018-0887: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, W
nvd
CVE-2019-0536P4MEDIUMCVSS 5.5v(Server Core installation)2019-01-08
CVE-2019-0536 [MEDIUM] CVE-2019-0536: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows
nvd
CVE-2018-8320P4MEDIUMCVSS 4.3v(Server Core installation)2018-10-10
CVE-2018-8320 [MEDIUM] CVE-2018-8320: A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Sec
A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
nvd
CVE-2018-8486P4MEDIUMCVSS 5.5v(Server Core installation)2018-10-10
CVE-2018-8486 [MEDIUM] CVE-2018-8486: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, ak
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Ser
nvd