Microsoft Windows Server 2012 R2 vulnerabilities
2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12
Vulnerabilities
Page 50 of 141
CVE-2026-58540P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58540 [HIGH] CWE-285 CVE-2026-58540: Improper authorization in Windows Installer allows an authorized attacker to elevate privileges loca
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50490P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50490 [HIGH] CWE-416 CVE-2026-50490: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50306P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50306 [HIGH] CWE-190 CVE-2026-50306: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-44806P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-44806 [HIGH] CWE-401 CVE-2026-44806: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-27484P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-27484 [HIGH] CWE-591 CVE-2025-27484: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50470P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2023-38144P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215632023-09-12
CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21557P3CRITICALCVSS 9.1≥ 6.3.9600.0, < 6.3.9600.207782023-01-10
CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
nvd
CVE-2024-38085P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-30220P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.204782022-07-12
CVE-2022-30220 [HIGH] CVE-2022-30220: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-20653P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.217652024-01-09
CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability
Microsoft Common Log File System Elevation of Privilege Vulnerability
nvd
CVE-2023-38143P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215632023-09-12
CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35380P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-35380 [HIGH] CWE-416 CVE-2023-35380: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38258P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221752024-09-10
CVE-2024-38258 [HIGH] CWE-23 CVE-2024-38258: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
nvd
CVE-2024-38141P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38141 [HIGH] CWE-416 CVE-2024-38141: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-43560P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43560 [HIGH] CWE-122 CVE-2024-43560: Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-29996P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.219722024-05-14
CVE-2024-29996 [HIGH] CWE-125 CVE-2024-29996: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-27737P3HIGHCVSS 8.6≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-27737 [HIGH] CWE-20 CVE-2025-27737: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2023-29351P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29351 [HIGH] CWE-59 CVE-2023-29351: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-33647P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-33647 [HIGH] CVE-2022-33647: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd