Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

4,050

CISA KEV

101

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

SortPage 56 of 203

CVE-2026-85373P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85373 [HIGH] CWE-122 CVE-2026-85373: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85358P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85358 [HIGH] CWE-122 CVE-2026-85358: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85366P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85366 [HIGH] CWE-122 CVE-2026-85366: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-96318P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-96318 [HIGH] CWE-122 CVE-2026-96318: Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85927P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85927 [HIGH] CWE-122 CVE-2026-85927: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-96312P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-96856P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-96217P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85869P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85869 [HIGH] CWE-122 CVE-2026-85869: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85871P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85871 [HIGH] CWE-122 CVE-2026-85871: Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26180P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14

CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-58726P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.228242025-10-14

CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-20849P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.229682026-01-13

CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2024-26158P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.219242024-04-09

CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability Microsoft Install Service Elevation of Privilege Vulnerability

nvd

CVE-2026-87711P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2022-24533P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.203372022-04-15

CVE-2022-24533 [HIGH] CVE-2022-24533: Remote Desktop Protocol Remote Code Execution Vulnerability Remote Desktop Protocol Remote Code Execution Vulnerability

nvd

CVE-2026-70095P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-69991P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-69987P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-69994P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

← Previous56 / 203Next →