Microsoft Windows Server 2012 R2 vulnerabilities
4,055 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,055
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2838MEDIUM1023LOW12
Vulnerabilities
Page 13 of 203
CVE-2018-8450P2HIGHCVSS 8.8v(Server Core installation)2018-11-14
CVE-2018-8450 [HIGH] CWE-404 CVE-2018-8450: A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Win
A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
nvd
CVE-2026-83910P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83910 [CRITICAL] CWE-787 CVE-2026-83910: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-100222P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-100222 [CRITICAL] CWE-122 CVE-2026-100222: Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83782P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83782 [CRITICAL] CWE-122 CVE-2026-83782: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69819P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69819 [CRITICAL] CWE-787 CVE-2026-69819: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69705P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-69705 [CRITICAL] CWE-787 CVE-2026-69705: Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50439P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50439 [CRITICAL] CWE-416 CVE-2026-50439: Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-43217P2CRITICALCVSS 9.8≥ 6.3.0, < 6.3.9600.202072021-12-15
CVE-2021-43217 [CRITICAL] CVE-2021-43217: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
nvd
CVE-2025-21369P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.224172025-02-11
CVE-2025-21369 [HIGH] CWE-122 CVE-2025-21369: Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft Digest Authentication Remote Code Execution Vulnerability
nvd
CVE-2025-21368P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.224172025-02-11
CVE-2025-21368 [HIGH] CWE-122 CVE-2025-21368: Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft Digest Authentication Remote Code Execution Vulnerability
nvd
CVE-2023-36017P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.216682023-11-14
CVE-2023-36017 [HIGH] CWE-843 CVE-2023-36017: Windows Scripting Engine Memory Corruption Vulnerability
Windows Scripting Engine Memory Corruption Vulnerability
nvd
CVE-2026-102217P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-102217 [HIGH] CWE-41 CVE-2026-102217: Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privilege
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2021-36965P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.201202021-09-15
CVE-2021-36965 [CRITICAL] CVE-2021-36965: Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
nvd
CVE-2026-73012P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-73012 [HIGH] CWE-122 CVE-2026-73012: Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-71352P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-71352 [HIGH] CWE-191 CVE-2026-71352: Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authori
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
nvd
CVE-2026-56194P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-56194 [HIGH] CWE-122 CVE-2026-56194: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50666P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50666 [HIGH] CWE-416 CVE-2026-50666: Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2018-8344P3HIGHCVSS 8.8v(Server Core installation)2018-08-15
CVE-2018-8344 [HIGH] CWE-94 CVE-2018-8344: A remote code execution vulnerability exists when the Windows font library improperly handles specia
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2024-38199P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38199 [CRITICAL] CWE-416 CVE-2024-38199: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
nvd
CVE-2018-8256P3HIGHCVSS 8.8v(Server Core installation)2018-11-14
CVE-2018-8256 [HIGH] CVE-2018-8256: A remote code execution vulnerability exists when PowerShell improperly handles specially crafted fi
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, Windows Server 2008 R2, Windows Server 2019, Windows 7, Windows
nvd