cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

Page 43 of 141
CVE-2026-40400P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-40400 [HIGH] CWE-23 CVE-2026-40400: Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a n Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.
nvd
CVE-2026-50365P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50365 [HIGH] CWE-287 CVE-2026-50365: Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2024-21427P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.219242024-03-12
CVE-2024-21427 [HIGH] CWE-287 CVE-2024-21427: Windows Kerberos Security Feature Bypass Vulnerability Windows Kerberos Security Feature Bypass Vulnerability
nvd
CVE-2024-26208P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26208 [HIGH] CWE-191 CVE-2024-26208: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-38184P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2024-49089P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49089 [HIGH] CWE-122 CVE-2024-49089: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2020-17047P3HIGHCVSS 7.5≥ 6.3.0, < publication2020-11-11
CVE-2020-17047 [HIGH] CVE-2020-17047: Windows Network File System Denial of Service Vulnerability Windows Network File System Denial of Service Vulnerability
nvd
CVE-2025-26688P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-26688 [HIGH] CWE-121 CVE-2025-26688: Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62470P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.229202025-12-09
CVE-2025-62470 [HIGH] CWE-122 CVE-2025-62470: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20940P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.229682026-01-13
CVE-2026-20940 [HIGH] CWE-822 CVE-2026-20940: Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53155P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12
CVE-2025-53155 [HIGH] CWE-122 CVE-2025-53155: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50355P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50355 [HIGH] CWE-121 CVE-2026-50355: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50304P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50304 [HIGH] CWE-121 CVE-2026-50304: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-29969P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29969 [HIGH] CWE-367 CVE-2025-29969: Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attac Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
nvd
CVE-2026-40407P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-40407 [HIGH] CWE-122 CVE-2026-40407: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40397P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-40397 [HIGH] CWE-191 CVE-2026-40397: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26160P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-26160 [HIGH] CWE-306 CVE-2026-26160: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50451P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50451 [HIGH] CWE-306 CVE-2026-50451: Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) all Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58535P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58535 [HIGH] CWE-908 CVE-2026-58535: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58533P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58533 [HIGH] CWE-908 CVE-2026-58533: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
← Previous43 / 141Next →