Microsoft Windows Server 2012 R2 vulnerabilities
4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12
Vulnerabilities
Page 67 of 203
CVE-2026-26160P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-26160 [HIGH] CWE-306 CVE-2026-26160: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87706P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.233982026-10-13
CVE-2026-87706 [HIGH] CWE-122 CVE-2026-87706: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50445P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50445 [HIGH] CWE-126 CVE-2026-50445: Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a netwo
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58535P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58535 [HIGH] CWE-908 CVE-2026-58535: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58533P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-58533 [HIGH] CWE-908 CVE-2026-58533: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-43893P3HIGHCVSS 7.5≥ 6.3.0, < 6.3.9600.202072021-12-15
CVE-2021-43893 [HIGH] CWE-668 CVE-2021-43893: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-69992P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-69992 [HIGH] CWE-416 CVE-2026-69992: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69607P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69607 [HIGH] CWE-416 CVE-2026-69607: Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-33154P3CRITICALCVSS 9.8≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-33154 [CRITICAL] CWE-367 CVE-2023-33154: Windows Partition Management Driver Elevation of Privilege Vulnerability
Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-69789P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-10-13
CVE-2026-69789 [HIGH] CWE-122 CVE-2026-69789: Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-44801P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-44801 [HIGH] CWE-416 CVE-2026-44801: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62759P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-62759 [HIGH] CWE-290 CVE-2026-62759: Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spo
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
nvd
CVE-2026-85811P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85811 [HIGH] CWE-416 CVE-2026-85811: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2021-31971P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.20045≥ 6.3.0, < 1.0.0.02021-06-08
CVE-2021-31971 [HIGH] CVE-2021-31971: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2021-34446P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-16
CVE-2021-34446 [HIGH] CVE-2021-34446: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2024-43623P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.222672024-11-12
CVE-2024-43623 [HIGH] CWE-190 CVE-2024-43623: Windows NT OS Kernel Elevation of Privilege Vulnerability
Windows NT OS Kernel Elevation of Privilege Vulnerability
nvd
CVE-2020-1031P3HIGHCVSS 7.5≥ 6.3.0, < publication2020-09-11
CVE-2020-1031 [HIGH] CVE-2020-1031: <p>An information disclosure vulnerability exists in the way that the Windows Server DHCP service im
An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory.
To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. An attacker who successfully exploited this vulnerability could obtain information to further c
nvd
CVE-2024-38124P3CRITICALCVSS 9.0≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-38124 [CRITICAL] CWE-287 CVE-2024-38124: Windows Netlogon Elevation of Privilege Vulnerability
Windows Netlogon Elevation of Privilege Vulnerability
nvd
CVE-2023-28244P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209192023-04-11
CVE-2023-28244 [HIGH] CWE-327 CVE-2023-28244: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-24542P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24542 [HIGH] CVE-2022-24542: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd