Microsoft Windows Server 2012 R2 vulnerabilities
4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12
Vulnerabilities
Page 85 of 203
CVE-2022-22000P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.202692022-02-09
CVE-2022-22000 [HIGH] CVE-2022-22000: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35380P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-35380 [HIGH] CWE-416 CVE-2023-35380: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-22026P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.204782022-07-12
CVE-2022-22026 [HIGH] CWE-787 CVE-2022-22026: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2026-35422P3MEDIUMCVSS 6.5≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-35422 [MEDIUM] CWE-288 CVE-2026-35422: Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized atta
Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21812P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.208212023-02-14
CVE-2023-21812 [HIGH] CWE-122 CVE-2023-21812: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21843P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.202462022-01-11
CVE-2022-21843 [HIGH] CVE-2022-21843: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2023-36425P3HIGHCVSS 8.0≥ 6.3.9600.0, < 6.3.9600.216682023-11-14
CVE-2023-36425 [HIGH] CWE-122 CVE-2023-36425: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2022-26931P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.203712022-05-10
CVE-2022-26931 [HIGH] CVE-2022-26931: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2021-43233P3HIGHCVSS 7.5≥ 6.3.0, < 6.3.9600.202072021-12-15
CVE-2021-43233 [HIGH] CVE-2021-43233: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-26641P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-26641 [HIGH] CWE-400 CVE-2025-26641: Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-32714P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.226202025-06-10
CVE-2025-32714 [HIGH] CWE-284 CVE-2025-32714: Improper access control in Windows Installer allows an authorized attacker to elevate privileges loc
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-21983P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-21983 [HIGH] CVE-2022-21983: Win32 Stream Enumeration Remote Code Execution Vulnerability
Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2025-21389P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21389 [HIGH] CWE-400 CVE-2025-21389: Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an un
Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
nvd
CVE-2022-24534P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24534 [HIGH] CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability
Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2025-33056P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226202025-06-10
CVE-2025-33056 [HIGH] CWE-284 CVE-2025-33056: Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-47955P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.225772025-06-10
CVE-2025-47955 [HIGH] CWE-269 CVE-2025-47955: Improper privilege management in Windows Remote Access Connection Manager allows an authorized attac
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26686P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08
CVE-2025-26686 [HIGH] CWE-591 CVE-2025-26686: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21347P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.218132024-02-13
CVE-2024-21347 [HIGH] CWE-122 CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-35352P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.210632023-07-11
CVE-2023-35352 [HIGH] CWE-693 CVE-2023-35352: Windows Remote Desktop Security Feature Bypass Vulnerability
Windows Remote Desktop Security Feature Bypass Vulnerability
nvd
CVE-2025-60714P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228692025-11-11
CVE-2025-60714 [HIGH] CWE-122 CVE-2025-60714: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
nvd