Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

4,050

CISA KEV

101

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

SortPage 86 of 203

CVE-2024-37982P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.222212024-10-08

CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

nvd

CVE-2025-54912P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227742025-09-09

CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83843P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13

CVE-2026-83843 [HIGH] CWE-125 CVE-2026-83843: Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker t Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-32712P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.226202025-06-10

CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62455P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.229202025-12-09

CVE-2025-62455 [HIGH] CWE-20 CVE-2025-62455: Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privil Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69785P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-69785 [HIGH] CWE-426 CVE-2026-69785: Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges loca Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59201P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14

CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53152P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12

CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

nvd

CVE-2025-50153P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12

CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49761P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.227252025-08-12

CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69631P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-69631 [HIGH] CWE-190 CVE-2026-69631: Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77893P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77893 [HIGH] CWE-125 CVE-2026-77893: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77886P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77886 [HIGH] CWE-125 CVE-2026-77886: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77501P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77501 [HIGH] CWE-125 CVE-2026-77501: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77895P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77895 [HIGH] CWE-125 CVE-2026-77895: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-69342P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-69342 [HIGH] CWE-125 CVE-2026-69342: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77502P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77502 [HIGH] CWE-125 CVE-2026-77502: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-84001P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-84001 [HIGH] CWE-125 CVE-2026-84001: Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny servic Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-77498P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-77498 [HIGH] CWE-125 CVE-2026-77498: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-83989P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08

CVE-2026-83989 [HIGH] CWE-125 CVE-2026-83989: Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.

nvd

← Previous86 / 203Next →