Microsoft Windows Server 2012 R2 vulnerabilities

2,520 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,520
CISA KEV
95
actively exploited
Public exploits
59
Exploited in wild
82
Severity breakdown
CRITICAL85HIGH1779MEDIUM647LOW9

Vulnerabilities

Page 31 of 126
CVE-2025-21229MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21229 [MEDIUM] CWE-125 CVE-2025-21229: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21242MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2025-21215MEDIUMCVSS 4.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21215 [MEDIUM] CWE-125 Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2025-21269MEDIUMCVSS 4.3≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21269 [MEDIUM] CWE-41 CVE-2025-21269: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2025-21211MEDIUMCVSS 6.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21211 [MEDIUM] CWE-693 Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2025-21316MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21316 [MEDIUM] CWE-532 CVE-2025-21316: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21265MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21265 [MEDIUM] CWE-125 CVE-2025-21265: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21210MEDIUMCVSS 4.2≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21210 [MEDIUM] CWE-636 CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2025-21261MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21261 [MEDIUM] CWE-125 CVE-2025-21261: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21268MEDIUMCVSS 4.3≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21268 [MEDIUM] CWE-41 CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-21217MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21217 [MEDIUM] CWE-693 Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability
cvelistv5
CVE-2025-21310MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21310 [MEDIUM] CWE-125 CVE-2025-21310: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21226MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21226 [MEDIUM] CWE-125 CVE-2025-21226: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21288MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21288 [MEDIUM] CWE-908 CVE-2025-21288: Windows COM Server Information Disclosure Vulnerability Windows COM Server Information Disclosure Vulnerability
nvd
CVE-2025-21312LOWCVSS 2.4≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21312 [LOW] CWE-908 CVE-2025-21312: Windows Smart Card Reader Information Disclosure Vulnerability Windows Smart Card Reader Information Disclosure Vulnerability
nvd
CVE-2024-49112CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49112 [CRITICAL] CWE-190 CVE-2024-49112: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2024-49122HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49122 [HIGH] CWE-416 CVE-2024-49122: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-49105HIGHCVSS 8.4≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49105 [HIGH] CWE-284 CVE-2024-49105: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2024-49128HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.225772024-12-12
CVE-2024-49128 [HIGH] CWE-416 CVE-2024-49128: Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unau Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49080HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49080 [HIGH] CWE-122 CVE-2024-49080: Windows IP Routing Management Snapin Remote Code Execution Vulnerability Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
← Previous31 / 126Next →