Microsoft Windows Server 2012 R2 vulnerabilities
4,052 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,052
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2838MEDIUM1020LOW12
Vulnerabilities
Page 50 of 203
CVE-2026-20849P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.229682026-01-13
CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-85867P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2021-40469P3HIGHCVSS 7.2≥ 6.3.0, < 6.3.9600.201442021-10-13
CVE-2021-40469 [HIGH] CVE-2021-40469: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2026-69793P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-62787P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-62787 [HIGH] CWE-416 CVE-2026-62787: Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
nvd
CVE-2026-50685P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50685 [HIGH] CWE-415 CVE-2026-50685: Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-96071P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69706P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2022-24502P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.203032022-03-09
CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2020-1508P3HIGHCVSS 8.8≥ 6.3.0, < publication2020-09-11
CVE-2020-1508 [HIGH] CVE-2020-1508: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2026-78446P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-78446 [HIGH] CWE-416 CVE-2026-78446: Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute cod
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-85798P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2020-1593P3HIGHCVSS 8.8≥ 6.3.0, < publication2020-09-11
CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-21920P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21920 [HIGH] CVE-2022-21920: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-22019P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.203712022-05-10
CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-24528P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21857P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-33750P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33749P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-14
CVE-2021-33749 [HIGH] CVE-2021-33749: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33752P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-14
CVE-2021-33752 [HIGH] CVE-2021-33752: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd