Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

4,050

CISA KEV

101

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

SortPage 77 of 203

CVE-2026-26163P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14

CVE-2026-26163 [HIGH] CWE-415 CVE-2026-26163: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83515P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-83515 [HIGH] CWE-908 CVE-2026-83515: Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2024-38019P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.220742024-07-09

CVE-2024-38019 [HIGH] CWE-190 CVE-2024-38019: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

nvd

CVE-2026-85376P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85376 [HIGH] CWE-1390 CVE-2026-85376: Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50476P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14

CVE-2026-50476 [HIGH] CWE-416 CVE-2026-50476: Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-57093P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14

CVE-2026-57093 [HIGH] CWE-416 CVE-2026-57093: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50470P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.232912026-07-14

CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2022-22034P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.204782022-07-12

CVE-2022-22034 [HIGH] CWE-416 CVE-2022-22034: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2026-88080P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-88080 [HIGH] CWE-416 CVE-2026-88080: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85334P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-85334 [HIGH] CWE-125 CVE-2026-85334: Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-78523P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-78523 [HIGH] CWE-416 CVE-2026-78523: Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-103558P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-103558 [HIGH] CWE-833 CVE-2026-103558: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-88101P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-108131P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-108131 [HIGH] CWE-295 CVE-2026-108131: No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2023-35309P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.210632023-07-11

CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

nvd

CVE-2025-60704P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.228692025-11-11

CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

nvd

CVE-2025-55231P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226762025-08-21

CVE-2025-55231 [HIGH] CWE-362 CVE-2025-55231: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.

nvd

CVE-2023-21557P3CRITICALCVSS 9.1≥ 6.3.9600.0, < 6.3.9600.207782023-01-10

CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

nvd

CVE-2022-35756P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31

CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2026-69347P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-69347 [HIGH] CWE-122 CVE-2026-69347: Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

nvd

← Previous77 / 203Next →