cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

Page 36 of 141
CVE-2021-33750P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.200692021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33749P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.200692021-07-14
CVE-2021-33749 [HIGH] CVE-2021-33749: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33752P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.200692021-07-14
CVE-2021-33752 [HIGH] CVE-2021-33752: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33756P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.200692021-07-14
CVE-2021-33756 [HIGH] CVE-2021-33756: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2022-38045P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability Windows Server Service Elevation of Privilege Vulnerability
nvd
CVE-2022-37976P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37976 [HIGH] CVE-2022-37976: Active Directory Certificate Services Elevation of Privilege Vulnerability Active Directory Certificate Services Elevation of Privilege Vulnerability
nvd
CVE-2019-0720P3HIGHCVSS 8.0≥ 6.3.0, < publication2019-08-14
CVE-2019-0720 [HIGH] CWE-20 CVE-2019-0720: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to exe
nvd
CVE-2022-34691P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-34691 [HIGH] CWE-269 CVE-2022-34691: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2024-38180P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2021-41342P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.20144≥ 6.3.0, < 1.0012021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21332P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2023-29373P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29373 [HIGH] CWE-125 CVE-2023-29373: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-32038P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-32038 [HIGH] CWE-416 CVE-2023-32038: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-29967P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29967 [HIGH] CWE-122 CVE-2025-29967: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to exec Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2020-16891P3HIGHCVSS 8.8≥ 6.3.0, < publication2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd
CVE-2026-24291P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.230742026-03-10
CVE-2026-24291 [HIGH] CWE-732 CVE-2026-24291: Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBro Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55692P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-55692 [HIGH] CWE-20 CVE-2025-55692: Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privil Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59512P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228692025-11-11
CVE-2025-59512 [HIGH] CWE-284 CVE-2025-59512: Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attac Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50351P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50351 [HIGH] CWE-284 CVE-2026-50351: Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
nvd
← Previous36 / 141Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase