Microsoft Windows Server 2012 R2 vulnerabilities
4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12
Vulnerabilities
Page 78 of 203
CVE-2024-38085P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.220742024-07-09
CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-20653P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.217652024-01-09
CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability
Microsoft Common Log File System Elevation of Privilege Vulnerability
nvd
CVE-2020-0909P3HIGHCVSS 7.5≥ 6.3.9600.0, < publication2020-05-21
CVE-2020-0909 [HIGH] CVE-2020-0909: A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle s
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.
To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.
The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle
nvd
CVE-2024-38258P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.221752024-09-10
CVE-2024-38258 [HIGH] CWE-23 CVE-2024-38258: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
nvd
CVE-2023-38144P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215632023-09-12
CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38141P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-38141 [HIGH] CWE-416 CVE-2024-38141: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2023-38143P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215632023-09-12
CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-21420P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.224172025-02-11
CVE-2025-21420 [HIGH] CWE-59 CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
nvd
CVE-2024-43560P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08
CVE-2024-43560 [HIGH] CWE-122 CVE-2024-43560: Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-37966P3HIGHCVSS 8.1v-2022-11-09
CVE-2022-37966 [HIGH] CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
nvd
CVE-2022-33647P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-33647 [HIGH] CVE-2022-33647: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2025-49687P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.226762025-07-08
CVE-2025-49687 [HIGH] CWE-125 CVE-2025-49687: Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate p
Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27737P3HIGHCVSS 8.6≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-27737 [HIGH] CWE-20 CVE-2025-27737: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2023-29351P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29351 [HIGH] CWE-59 CVE-2023-29351: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2021-34442P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.200692021-07-16
CVE-2021-34442 [HIGH] CVE-2021-34442: Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2019-1057P3HIGHCVSS 7.5≥ 6.3.0, < publication2019-08-14
CVE-2019-1057 [HIGH] CWE-611 CVE-2019-1057: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system.
To exploit the vulnerability, an attacker could host a specially crafted website designed to invoke MSXML thr
nvd
CVE-2024-29995P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.221342024-08-13
CVE-2024-29995 [HIGH] CWE-208 CVE-2024-29995: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2021-26882P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.199682021-03-11
CVE-2021-26882 [HIGH] CVE-2021-26882: Remote Access API Elevation of Privilege Vulnerability
Remote Access API Elevation of Privilege Vulnerability
nvd
CVE-2023-23410P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.208652023-03-14
CVE-2023-23410 [HIGH] CWE-190 CVE-2023-23410: Windows HTTP.sys Elevation of Privilege Vulnerability
Windows HTTP.sys Elevation of Privilege Vulnerability
nvd
CVE-2025-26673P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-26673 [HIGH] CWE-400 CVE-2025-26673: Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
nvd