Microsoft Windows Server 2012 R2 vulnerabilities

2,520 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,520
CISA KEV
95
actively exploited
Public exploits
59
Exploited in wild
82
Severity breakdown
CRITICAL85HIGH1779MEDIUM647LOW9

Vulnerabilities

Page 64 of 126
CVE-2022-35753HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35753 [HIGH] CVE-2022-35753: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35756HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-35743HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35743 [HIGH] CWE-94 CVE-2022-35743: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
nvd
CVE-2022-35750HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35750 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-35754MEDIUMCVSS 6.7≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35754 [MEDIUM] CVE-2022-35754: Unified Write Filter Elevation of Privilege Vulnerability Unified Write Filter Elevation of Privilege Vulnerability
nvd
CVE-2022-35747MEDIUMCVSS 5.9≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35747 [MEDIUM] CVE-2022-35747: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
nvd
CVE-2022-35759MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35759 [MEDIUM] CVE-2022-35759: Windows Local Security Authority (LSA) Denial of Service Vulnerability Windows Local Security Authority (LSA) Denial of Service Vulnerability
nvd
CVE-2022-35758MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35758 [MEDIUM] CVE-2022-35758: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2023-24941CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24941 [CRITICAL] CWE-908 CVE-2023-24941: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-24943CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-29336HIGHCVSS 7.8KEVPoC≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-29336 [HIGH] CWE-416 Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-24940HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24940 [HIGH] CWE-476 CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
nvd
CVE-2023-24903HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24903 [HIGH] CWE-415 CVE-2023-24903: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2023-28283HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-28283 [HIGH] CWE-591 CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2023-24939HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24939 [HIGH] Server for NFS Denial of Service Vulnerability Server for NFS Denial of Service Vulnerability Server for NFS Denial of Service Vulnerability
cvelistv5
CVE-2023-24942HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24942 [HIGH] CWE-126 CVE-2023-24942: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-29325HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-29325 [HIGH] CWE-416 Windows OLE Remote Code Execution Vulnerability Windows OLE Remote Code Execution Vulnerability Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2023-24948HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24948 [HIGH] CWE-122 CVE-2023-24948: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-24901HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24901 [HIGH] CWE-126 CVE-2023-24901: Windows NFS Portmapper Information Disclosure Vulnerability Windows NFS Portmapper Information Disclosure Vulnerability
nvd
CVE-2023-28251MEDIUMCVSS 5.5≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-28251 [MEDIUM] CVE-2023-28251: Windows Driver Revocation List Security Feature Bypass Vulnerability Windows Driver Revocation List Security Feature Bypass Vulnerability
nvd