cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

2,812 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
2,812
CISA KEV
97
actively exploited
Public exploits
93
Exploited in wild
129
Severity breakdown
CRITICAL105HIGH1991MEDIUM704LOW12

Vulnerabilities

Page 90 of 141
CVE-2021-24102P3HIGHCVSS 7.8≥ 6.3.0, < publication2021-02-25
CVE-2021-24102 [HIGH] CWE-269 CVE-2021-24102: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2022-41095P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41095 [HIGH] CVE-2022-41095: Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2021-38671P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201202021-09-15
CVE-2021-38671 [HIGH] CWE-269 CVE-2021-38671: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-38667P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201202021-09-15
CVE-2021-38667 [HIGH] CWE-269 CVE-2021-38667: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-36927P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.203032021-08-12
CVE-2021-36927 [HIGH] CWE-269 CVE-2021-36927: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
nvd
CVE-2021-34459P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.200692021-07-16
CVE-2021-34459 [HIGH] CWE-269 CVE-2021-34459: Windows AppContainer Elevation Of Privilege Vulnerability Windows AppContainer Elevation Of Privilege Vulnerability
nvd
CVE-2021-38630P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201202021-09-15
CVE-2021-38630 [HIGH] CWE-269 CVE-2021-38630: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-36964P3HIGHCVSS 7.8≥ 6.3.0, < 6.3.9600.201202021-09-15
CVE-2021-36964 [HIGH] CWE-269 CVE-2021-36964: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2025-21331P3HIGHCVSS 7.3≥ 6.3.9600.0, < 6.3.9600.223712025-01-14
CVE-2025-21331 [HIGH] CWE-59 CVE-2025-21331: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-21820P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.208212023-02-14
CVE-2023-21820 [HIGH] CWE-126 CVE-2023-21820: Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2023-32021P3HIGHCVSS 7.1≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-32021 [HIGH] CVE-2023-32021: Windows SMB Witness Service Security Feature Bypass Vulnerability Windows SMB Witness Service Security Feature Bypass Vulnerability
nvd
CVE-2026-40413P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-40413 [HIGH] CWE-476 CVE-2026-40413: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
cvelistv5nvd
CVE-2022-26818P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26818 [MEDIUM] CVE-2022-26818: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-27063P3HIGHCVSS 7.5≥ 6.3.0, < publication2021-03-11
CVE-2021-27063 [HIGH] CVE-2021-27063: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2022-26829P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26829 [MEDIUM] CWE-362 CVE-2022-26829: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26821P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26821 [MEDIUM] CWE-362 CVE-2022-26821: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26822P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26822 [MEDIUM] CWE-362 CVE-2022-26822: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26819P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26819 [MEDIUM] CWE-362 CVE-2022-26819: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26820P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26820 [MEDIUM] CWE-362 CVE-2022-26820: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26817P3MEDIUMCVSS 6.6≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-26817 [MEDIUM] CWE-362 CVE-2022-26817: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase