Microsoft Windows Server 2012 R2 vulnerabilities
2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12
Vulnerabilities
Page 130 of 141
CVE-2021-38631P4MEDIUMCVSS 4.4≥ 6.3.0, < 6.3.9600.201742021-11-10
CVE-2021-38631 [MEDIUM] CVE-2021-38631: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2021-41371P4MEDIUMCVSS 4.4≥ 6.3.0, < 6.3.9600.201742021-11-10
CVE-2021-41371 [MEDIUM] CVE-2021-41371: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2023-24911P4MEDIUMCVSS 4.3≥ 6.3.9600.0, < 6.3.9600.208652023-03-14
CVE-2023-24911 [MEDIUM] CWE-191 CVE-2023-24911: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2025-24055P4MEDIUMCVSS 4.3≥ 6.3.9600.0, < 6.3.9600.224702025-03-11
CVE-2025-24055 [MEDIUM] CWE-125 CVE-2025-24055: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2022-22710P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.202692022-02-09
CVE-2022-22710 [MEDIUM] CVE-2022-22710: Windows Common Log File System Driver Denial of Service Vulnerability
Windows Common Log File System Driver Denial of Service Vulnerability
nvd
CVE-2022-35832P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-35832 [MEDIUM] CVE-2022-35832: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2022-21973P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.203032022-03-09
CVE-2022-21973 [MEDIUM] CVE-2022-21973: Windows Media Center Update Denial of Service Vulnerability
Windows Media Center Update Denial of Service Vulnerability
nvd
CVE-2021-28443P4MEDIUMCVSS 5.5≥ 6.3.0, < publication2021-04-13
CVE-2021-28443 [MEDIUM] CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2022-24484P4MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24484 [MEDIUM] CVE-2022-24484: Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
nvd
CVE-2022-21845P4MEDIUMCVSS 4.7≥ 6.3.9600.0, < 6.3.9600.204782022-07-12
CVE-2022-21845 [MEDIUM] CVE-2022-21845: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-20691P4MEDIUMCVSS 4.7≥ 6.3.9600.0, < 6.3.9600.217652024-01-09
CVE-2024-20691 [MEDIUM] CWE-125 CVE-2024-20691: Windows Themes Information Disclosure Vulnerability
Windows Themes Information Disclosure Vulnerability
nvd
CVE-2025-21298CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21298 [CRITICAL] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2023-29325HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-29325 [HIGH] CWE-416 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2024-21340P4MEDIUMCVSS 4.6≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21340 [MEDIUM] CWE-126 CVE-2024-21340: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2025-29839P4MEDIUMCVSS 4.0≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29839 [MEDIUM] CWE-125 CVE-2025-29839: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45642P4LOWCVSS 3.9≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-45642 [LOW] CWE-20 CVE-2026-45642: Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Servi
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
nvd
CVE-2025-59280P4LOWCVSS 3.1≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59280 [LOW] CWE-287 CVE-2025-59280: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering o
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2018-8481P4LOWCVSS 3.1v(Server Core installation)2018-10-10
CVE-2018-8481 [LOW] CVE-2018-8481: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2025-21210P4MEDIUMCVSS 4.2≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21210 [MEDIUM] CWE-636 CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability
Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2025-21214P4MEDIUMCVSS 4.2≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21214 [MEDIUM] CWE-200 CVE-2025-21214: Windows BitLocker Information Disclosure Vulnerability
Windows BitLocker Information Disclosure Vulnerability
nvd