Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

2,812

CISA KEV

actively exploited

Public exploits

Exploited in wild

129

Severity breakdown

CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

SortPage 54 of 141

CVE-2025-29831P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225772025-05-13

CVE-2025-29831 [HIGH] CWE-416 CVE-2025-29831: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-27913P3HIGHCVSS 7.7≥ 6.3.9600.0, < 6.3.9600.231322026-04-14

CVE-2026-27913 [HIGH] CWE-20 CVE-2026-27913: Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

nvd

CVE-2026-57979P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14

CVE-2026-57979 [HIGH] CWE-125 CVE-2026-57979: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2022-35751P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31

CVE-2022-35751 [HIGH] CVE-2022-35751: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability

nvd

CVE-2026-32156P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.231322026-04-14

CVE-2026-32156 [HIGH] CWE-416 CVE-2026-32156: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.

nvd

CVE-2020-16927P3HIGHCVSS 7.5≥ 6.3.0, < publication2020-10-16

CVE-2020-16927 [HIGH] CVE-2020-16927: <p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connec A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a sp

nvd

CVE-2019-1206P3HIGHCVSS 7.5≥ 6.3.0, < publication2019-08-14

CVE-2019-1206 [HIGH] CWE-787 CVE-2019-1206: A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends s A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP se

nvd

CVE-2022-22000P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.202692022-02-09

CVE-2022-22000 [HIGH] CVE-2022-22000: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2025-30394P3MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.225772025-05-13

CVE-2025-30394 [MEDIUM] CWE-591 CVE-2025-30394: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unaut Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-21420P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.224172025-02-11

CVE-2025-21420 [HIGH] CWE-59 CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

nvd

CVE-2023-21812P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.208212023-02-14

CVE-2023-21812 [HIGH] CWE-122 CVE-2023-21812: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2022-22026P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.204782022-07-12

CVE-2022-22026 [HIGH] CWE-787 CVE-2022-22026: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

nvd

CVE-2026-35422P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.231812026-05-12

CVE-2026-35422 [MEDIUM] CWE-288 CVE-2026-35422: Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized atta Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.

nvd

CVE-2022-21843P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.202462022-01-11

CVE-2022-21843 [HIGH] CVE-2022-21843: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

nvd

CVE-2022-35755P3HIGHCVSS 7.3≥ 6.3.9600.0, < 6.3.9600.205202023-05-31

CVE-2022-35755 [HIGH] CVE-2022-35755: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2023-36425P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.216682023-11-14

CVE-2023-36425 [HIGH] CWE-122 CVE-2023-36425: Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability

nvd

CVE-2022-22037P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.204782022-07-12

CVE-2022-22037 [HIGH] CVE-2022-22037: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

nvd

CVE-2021-43233P3HIGHCVSS 7.5≥ 6.3.0, < 6.3.9600.202072021-12-15

CVE-2021-43233 [HIGH] CVE-2021-43233: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability

nvd

CVE-2025-26641P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-26641 [HIGH] CWE-400 CVE-2025-26641: Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-48573P3HIGHCVSS 7.9≥ 6.3.9600.0, < 6.3.9600.232282026-06-09

CVE-2026-48573 [HIGH] CWE-1329 CVE-2026-48573: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

← Previous54 / 141Next →