cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,055 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,055
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2838MEDIUM1023LOW12

Vulnerabilities

Page 19 of 203
CVE-2026-50518P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50518 [CRITICAL] CWE-122 CVE-2026-50518: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50447P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50447 [CRITICAL] CWE-122 CVE-2026-50447: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83748P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83748 [CRITICAL] CWE-122 CVE-2026-83748: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83935P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83935 [CRITICAL] CWE-122 CVE-2026-83935: Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97815P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-97815 [CRITICAL] CWE-122 CVE-2026-97815: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58594P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58594 [CRITICAL] CWE-190 CVE-2026-58594: Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50694P2CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50694 [CRITICAL] CWE-416 CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-47984P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-47984 [HIGH] CWE-693 CVE-2025-47984: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38104P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38104 [HIGH] CWE-822 CVE-2024-38104: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2024-43611P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43611 [HIGH] CWE-20 CVE-2024-43611: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49080P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49080 [HIGH] CWE-122 CVE-2024-49080: Windows IP Routing Management Snapin Remote Code Execution Vulnerability Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-43593P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43593 [HIGH] CWE-20 CVE-2024-43593: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43592P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43592 [HIGH] CWE-20 CVE-2024-43592: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21376P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.224172025-02-11
CVE-2025-21376 [HIGH] CWE-122 CVE-2025-21376: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2020-1074P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-09-11
CVE-2020-1074 [HIGH] CVE-2020-1074: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly hand A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili
nvd
CVE-2026-88159P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-88159 [HIGH] CWE-125 CVE-2026-88159: Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-28220P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28220 [HIGH] CWE-591 CVE-2023-28220: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-28219P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28219 [HIGH] CWE-591 CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2026-83889P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83889 [HIGH] CWE-763 CVE-2026-83889: Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-23669P2HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.230742026-03-10
CVE-2026-23669 [HIGH] CWE-416 CVE-2026-23669: Use after free in RPC Runtime allows an authorized attacker to execute code over a network. Use after free in RPC Runtime allows an authorized attacker to execute code over a network.
nvd
← Previous19 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase