cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,055 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,055
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2840MEDIUM1021LOW12

Vulnerabilities

Page 27 of 203
CVE-2026-50474P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50474 [HIGH] CWE-416 CVE-2026-50474: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69717P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69717 [HIGH] CWE-125 CVE-2026-69717: Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-47653P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85339P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85339 [HIGH] CWE-122 CVE-2026-85339: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-42975P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-62823P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-62823 [HIGH] CWE-122 CVE-2026-62823: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-20860P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.229682026-01-13
CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33837P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70127P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70127 [HIGH] CWE-416 CVE-2026-70127: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62792P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56649P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69802P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-69802 [HIGH] CWE-1390 CVE-2026-69802: Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to e Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-1700P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1700 [HIGH] CVE-2021-1700: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1701P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1701 [HIGH] CVE-2021-1701: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1667P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1667 [HIGH] CVE-2021-1667: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21881P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21881 [HIGH] CWE-362 CVE-2022-21881: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-26230P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2021-1666P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1666 [HIGH] CVE-2021-1666: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1658P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1658 [HIGH] CVE-2021-1658: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1660P3HIGHCVSS 8.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1660 [HIGH] CVE-2021-1660: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
← Previous27 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase