cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

Page 68 of 203
CVE-2025-47986P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-47986 [HIGH] CWE-416 CVE-2025-47986: Use after free in Universal Print Management Service allows an authorized attacker to elevate privil Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-60705P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228692025-11-11
CVE-2025-60705 [HIGH] CWE-284 CVE-2025-60705: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker t Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-26812P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26812 [HIGH] CVE-2022-26812: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-24536P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24536 [HIGH] CVE-2022-24536: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26815P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26815 [HIGH] CVE-2022-26815: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26813P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26813 [HIGH] CVE-2022-26813: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-41109P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41109 [HIGH] CVE-2022-41109: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-34702P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-34702 [HIGH] CWE-362 CVE-2022-34702: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2024-21437P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.218712024-03-12
CVE-2024-21437 [HIGH] CWE-416 CVE-2024-21437: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-35745P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35745 [HIGH] CVE-2022-35745: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35752P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35752 [HIGH] CVE-2022-35752: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35753P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35753 [HIGH] CVE-2022-35753: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-44670P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207212022-12-13
CVE-2022-44670 [HIGH] CWE-367 CVE-2022-44670: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-44676P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207212022-12-13
CVE-2022-44676 [HIGH] CWE-362 CVE-2022-44676: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41039P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41039 [HIGH] CWE-362 CVE-2022-41039: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21546P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207782023-01-10
CVE-2023-21546 [HIGH] CWE-591 CVE-2023-21546: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21679P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207782023-01-10
CVE-2023-21679 [HIGH] CWE-416 CVE-2023-21679: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21555P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.207782023-01-10
CVE-2023-21555 [HIGH] CWE-367 CVE-2023-21555: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21712P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.206712023-04-27
CVE-2023-21712 [HIGH] CWE-362 CVE-2023-21712: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-24903P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.209692023-05-09
CVE-2023-24903 [HIGH] CWE-415 CVE-2023-24903: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase