cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

Page 47 of 141
CVE-2026-26176P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-26176 [HIGH] CWE-122 CVE-2026-26176: Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized atta Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49091P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49091 [HIGH] CWE-591 CVE-2024-49091: Windows Domain Name Service Remote Code Execution Vulnerability Windows Domain Name Service Remote Code Execution Vulnerability
nvd
CVE-2026-50695P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50695 [HIGH] CWE-121 CVE-2026-50695: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2023-35309P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2026-50368P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50368 [HIGH] CWE-121 CVE-2026-50368: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50411P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50411 [HIGH] CWE-121 CVE-2026-50411: Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-54983P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-54983 [HIGH] CWE-121 CVE-2026-54983: Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50504P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50504 [HIGH] CWE-126 CVE-2026-50504: Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information ov Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-55231P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226762025-08-21
CVE-2025-55231 [HIGH] CWE-362 CVE-2025-55231: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-44799P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-44799 [HIGH] CWE-122 CVE-2026-44799: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32161P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-32161 [HIGH] CWE-362 CVE-2026-32161: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2022-35756P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2024-30025P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.219722024-05-14
CVE-2024-30025 [HIGH] CWE-125 CVE-2024-30025: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2018-0959P3HIGHCVSS 7.6v(Server Core installation)2018-05-09
CVE-2018-0959 [HIGH] CWE-20 CVE-2018-0959: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server
nvd
CVE-2023-28244P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28244 [HIGH] CWE-327 CVE-2023-28244: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-37966P3HIGHCVSS 8.1vN/A2022-11-09
CVE-2022-37966 [HIGH] CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
nvd
CVE-2025-49687P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-49687 [HIGH] CWE-125 CVE-2025-49687: Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate p Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2021-33754P3HIGHCVSS 8.0≥ 6.3.0, < 6.3.9600.200692021-07-14
CVE-2021-33754 [HIGH] CVE-2021-33754: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-41109P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41109 [HIGH] CVE-2022-41109: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-44670P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207212022-12-13
CVE-2022-44670 [HIGH] CWE-367 CVE-2022-44670: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
← Previous47 / 141Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase