Microsoft Windows Server 2012 R2 vulnerabilities
2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12
Vulnerabilities
Page 68 of 141
CVE-2025-47985P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-47985 [HIGH] CWE-822 CVE-2025-47985: Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate priv
Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49661P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-49661 [HIGH] CWE-822 CVE-2025-49661: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55230P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.226762025-08-21
CVE-2025-55230 [HIGH] CWE-822 CVE-2025-55230: Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to eleva
Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-34696P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-34696 [HIGH] CWE-362 CVE-2022-34696: Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2026-40378P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-40378 [HIGH] CWE-789 CVE-2026-40378: Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (L
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-27738P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-27738 [MEDIUM] CWE-284 CVE-2025-27738: Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to dis
Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-27908P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27908 [HIGH] CWE-416 CVE-2026-27908: Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate
Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-25004P3HIGHCVSS 7.3≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27921P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27921 [HIGH] CWE-362 CVE-2026-27921: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2018-8340P3MEDIUMCVSS 6.5v(Server Core installation)2018-08-15
CVE-2018-8340 [MEDIUM] CVE-2018-8340: A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) imp
A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "AD FS Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows Server 2012 R2, Windows 10 Servers.
nvd
CVE-2020-0836P3HIGHCVSS 7.5≥ 6.3.0, < publication2020-09-11
CVE-2020-0836 [HIGH] CVE-2020-0836: <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries.
A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.
To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to a target, resulting in a denial of service.
The update address
nvd
CVE-2026-41108P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-41108 [HIGH] CWE-122 CVE-2026-41108: Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privile
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45653P3HIGHCVSS 7.0≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49670P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-49670 [MEDIUM] CWE-122 CVE-2025-49670: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-1710P3HIGHCVSS 7.8≥ 6.3.0, < publication2021-01-12
CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-31976P3HIGHCVSS 7.5≥ 6.3.0, < 6.3.9600.20045≥ 6.3.0, < 6.3.9600.200442021-06-08
CVE-2021-31976 [HIGH] CVE-2021-31976: Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31975P3HIGHCVSS 7.5≥ 6.3.0, < 6.3.9600.20045≥ 6.3.0, < 6.3.9600.200442021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8≥ 6.3.0, < publication2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2022-29105P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.203712022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8≥ 6.3.0, < publication2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd