cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

Page 74 of 203
CVE-2024-26195P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26195 [HIGH] CWE-122 CVE-2024-26195: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2024-26202P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-26202 [HIGH] CWE-122 CVE-2024-26202: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2024-38044P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38044 [HIGH] CWE-197 CVE-2024-38044: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2026-32183P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-32183 [HIGH] CWE-77 CVE-2026-32183: Improper neutralization of special elements used in a command ('command injection') in Windows Snipp Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83655P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-83655 [HIGH] CWE-125 CVE-2026-83655: Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service ov Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-70082P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70082 [HIGH] CWE-248 CVE-2026-70082: Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-38028P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38028 [HIGH] CWE-125 CVE-2024-38028: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2024-38025P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38025 [HIGH] CWE-122 CVE-2024-38025: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2026-100215P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-100215 [HIGH] CWE-122 CVE-2026-100215: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-96911P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-96911 [HIGH] CWE-59 CVE-2026-96911: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88133P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-88133 [HIGH] CWE-59 CVE-2026-88133: Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker t Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70079P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70079 [HIGH] CWE-841 CVE-2026-70079: Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny s Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-30098P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.228242024-07-09
CVE-2024-30098 [HIGH] CWE-327 CVE-2024-30098: Windows Cryptographic Services Security Feature Bypass Vulnerability Windows Cryptographic Services Security Feature Bypass Vulnerability
nvd
CVE-2026-70131P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70131 [HIGH] CWE-122 CVE-2026-70131: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-54984P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-54984 [HIGH] CWE-122 CVE-2026-54984: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-50347P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50347 [HIGH] CWE-122 CVE-2026-50347: Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.
nvd
CVE-2022-30160P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.204022022-06-15
CVE-2022-30160 [HIGH] CVE-2022-30160: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2023-36401P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.216682023-11-14
CVE-2023-36401 [HIGH] CWE-190 CVE-2023-36401: Microsoft Remote Registry Service Remote Code Execution Vulnerability Microsoft Remote Registry Service Remote Code Execution Vulnerability
nvd
CVE-2026-35424P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-35424 [HIGH] CWE-401 CVE-2026-35424: Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol a Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-69428P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-69428 [HIGH] CWE-125 CVE-2026-69428: Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized at Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
nvd
← Previous74 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase