cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,055 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,055
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2838MEDIUM1023LOW12

Vulnerabilities

Page 15 of 203
CVE-2026-69681P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69681 [HIGH] CWE-122 CVE-2026-69681: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2018-8349P3HIGHCVSS 8.8v(Server Core installation)2018-08-15
CVE-2018-8349 [HIGH] CWE-502 CVE-2018-8349: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properl A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20
nvd
CVE-2024-26212P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26212 [HIGH] CWE-400 CVE-2024-26212: DHCP Server Service Denial of Service Vulnerability DHCP Server Service Denial of Service Vulnerability
nvd
CVE-2022-34722P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-34722 [CRITICAL] CVE-2022-34722: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2023-36910P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-36910 [CRITICAL] CWE-190 CVE-2023-36910: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35385P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-35385 [CRITICAL] CWE-190 CVE-2023-35385: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2022-21894MEDIUMCVSS 4.4ExploitedPoC≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21894 [MEDIUM] Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2023-32057P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-32015P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-32015 [CRITICAL] CWE-20 CVE-2023-32015: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-29363P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29363 [CRITICAL] CWE-122 CVE-2023-29363: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-32014P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-32014 [CRITICAL] CWE-191 CVE-2023-32014: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-35365P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-36911P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-36911 [CRITICAL] CWE-190 CVE-2023-36911: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36005P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.217152023-12-12
CVE-2023-36005 [HIGH] CWE-591 CVE-2023-36005: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2018-8494P3HIGHCVSS 8.8v(Server Core installation)2018-10-10
CVE-2018-8494 [HIGH] CWE-611 CVE-2018-8494: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Win
nvd
CVE-2018-8225P3HIGHCVSS 8.1v(Server Core installation)2018-06-14
CVE-2018-8225 [HIGH] CVE-2018-8225: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2026-57092P2CRITICALCVSS 9.9≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-57092 [CRITICAL] CWE-416 CVE-2026-57092: Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a networ Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-83770P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83770 [CRITICAL] CWE-122 CVE-2026-83770: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70147P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70147 [CRITICAL] CWE-122 CVE-2026-70147: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70153P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70153 [CRITICAL] CWE-122 CVE-2026-70153: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
nvd
← Previous15 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase