Microsoft Windows Server 2012 R2 vulnerabilities
4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12
Vulnerabilities
Page 65 of 203
CVE-2026-54128P3HIGHCVSS 8.4≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-54128 [HIGH] CWE-416 CVE-2026-54128: Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-27909P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27909 [HIGH] CWE-416 CVE-2026-27909: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28283P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-28283 [HIGH] CWE-591 CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30211P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.204782022-07-12
CVE-2022-30211 [HIGH] CVE-2022-30211: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2026-69332P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69332 [HIGH] CWE-125 CVE-2026-69332: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69505P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69505 [HIGH] CWE-125 CVE-2026-69505: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69458P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69458 [HIGH] CWE-125 CVE-2026-69458: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a n
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50365P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50365 [HIGH] CWE-287 CVE-2026-50365: Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2026-33826P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-33826 [HIGH] CWE-20 CVE-2026-33826: Improper input validation in Windows Active Directory allows an authorized attacker to execute code
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
nvd
CVE-2026-27912P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27912 [HIGH] CWE-285 CVE-2026-27912: Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2022-30194P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-30194 [HIGH] CWE-94 CVE-2022-30194: Windows WebBrowser Control Remote Code Execution Vulnerability
Windows WebBrowser Control Remote Code Execution Vulnerability
nvd
CVE-2023-38184P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-70058P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70058 [HIGH] CWE-787 CVE-2026-70058: Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70155P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70155 [HIGH] CWE-401 CVE-2026-70155: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-49089P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.223182024-12-12
CVE-2024-49089 [HIGH] CWE-122 CVE-2024-49089: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2026-70031P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83795P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83795 [HIGH] CWE-122 CVE-2026-83795: Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21246P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.230222026-02-10
CVE-2026-21246 [HIGH] CWE-122 CVE-2026-21246: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70065P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-70065 [HIGH] CWE-401 CVE-2026-70065: Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized att
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd