Microsoft Windows Server 2012 R2 vulnerabilities

2,520 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,520
CISA KEV
95
actively exploited
Public exploits
59
Exploited in wild
82
Severity breakdown
CRITICAL85HIGH1779MEDIUM647LOW9

Vulnerabilities

Page 39 of 126
CVE-2024-38132HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38132 [HIGH] CWE-125 CVE-2024-38132: Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2024-38145HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38145 [HIGH] CWE-476 CVE-2024-38145: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38144HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38144 [HIGH] CWE-190 CVE-2024-38144: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38196HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38196 [HIGH] CWE-20 CVE-2024-38196: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38127HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38127 [HIGH] CWE-126 CVE-2024-38127: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2024-38198HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2024-38114HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38114 [HIGH] CWE-122 CVE-2024-38114: Windows IP Routing Management Snapin Remote Code Execution Vulnerability Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-38146HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38146 [HIGH] CWE-476 CVE-2024-38146: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38193HIGHCVSS 7.8KEVPoC≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-38138HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221752024-08-13
CVE-2024-38138 [HIGH] CWE-416 CVE-2024-38138: Windows Deployment Services Remote Code Execution Vulnerability Windows Deployment Services Remote Code Execution Vulnerability
nvd
CVE-2024-38153HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38153 [HIGH] CWE-367 CVE-2024-38153: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38118MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38118 [MEDIUM] CWE-908 CVE-2024-38118: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2024-38213MEDIUMCVSS 6.5KEV≥ 6.3.9600.0, < 6.3.9600.220232024-08-13
CVE-2024-38213 [MEDIUM] CWE-693 CVE-2024-38213: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2024-38214MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38214 [MEDIUM] CWE-125 CVE-2024-38214: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
nvd
CVE-2024-38122MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38122 [MEDIUM] CWE-908 CVE-2024-38122: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2024-38223MEDIUMCVSS 6.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38223 [MEDIUM] CWE-284 CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability Windows Initial Machine Configuration Elevation of Privilege Vulnerability
nvd
CVE-2024-38151MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38151 [MEDIUM] CWE-125 CVE-2024-38151: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-38074CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38074 [CRITICAL] CWE-191 CVE-2024-38074: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
nvd
CVE-2024-38077CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38077 [CRITICAL] CWE-122 CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
nvd
CVE-2024-38022HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38022 [HIGH] CWE-59 CVE-2024-38022: Windows Image Acquisition Elevation of Privilege Vulnerability Windows Image Acquisition Elevation of Privilege Vulnerability
nvd