cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,055 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,055
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2840MEDIUM1021LOW12

Vulnerabilities

Page 43 of 203
CVE-2024-21375P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21375 [HIGH] CWE-416 CVE-2024-21375: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21361P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21361 [HIGH] CWE-122 CVE-2024-21361: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21368P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21368 [HIGH] CWE-122 CVE-2024-21368: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21367P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21367 [HIGH] CWE-122 CVE-2024-21367: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21359P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21359 [HIGH] CWE-122 CVE-2024-21359: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21391P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21391 [HIGH] CWE-197 CVE-2024-21391: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21352P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21352 [HIGH] CWE-197 CVE-2024-21352: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-49798P3CRITICALCVSS 9.3≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-49798 [CRITICAL] CWE-416 CVE-2026-49798: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2024-43519P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43519 [HIGH] CWE-197 CVE-2024-43519: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-21222P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-21222 [HIGH] CWE-122 CVE-2025-21222: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21221P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-21221 [HIGH] CWE-122 CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21205P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-21205 [HIGH] CWE-122 CVE-2025-21205: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38053P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38053 [HIGH] CWE-416 CVE-2024-38053: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21409P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21409 [HIGH] CWE-122 CVE-2025-21409: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21339P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21339 [HIGH] CWE-122 CVE-2025-21339: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21411P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21411 [HIGH] CWE-122 CVE-2025-21411: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21413P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21413 [HIGH] CWE-122 CVE-2025-21413: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43518P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43518 [HIGH] CWE-122 CVE-2024-43518: Windows Telephony Server Remote Code Execution Vulnerability Windows Telephony Server Remote Code Execution Vulnerability
nvd
CVE-2026-69494P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69494 [HIGH] CWE-122 CVE-2026-69494: Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69598P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69598 [HIGH] CWE-131 CVE-2026-69598: Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute cod Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
← Previous43 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase