Microsoft Windows Server 2012 R2 vulnerabilities
4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.
Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12
Vulnerabilities
Page 90 of 203
CVE-2026-45592P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232282026-06-09
CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85321P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85321 [HIGH] CWE-770 CVE-2026-85321: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50491P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.232912026-07-14
CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege
Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59278P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59275P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.228242025-10-14
CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33834P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-29831P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225772025-05-13
CVE-2025-29831 [HIGH] CWE-416 CVE-2025-29831: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-61349P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.233382026-08-11
CVE-2026-61349 [HIGH] CWE-362 CVE-2026-61349: Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26183P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-26183 [HIGH] CWE-284 CVE-2026-26183: Improper access control in Windows RPC API allows an authorized attacker to elevate privileges local
Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69650P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-69650 [HIGH] CWE-347 CVE-2026-69650: Improper verification of cryptographic signature in Windows Key Distribution Center allows an author
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34338P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40382P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231812026-05-12
CVE-2026-40382 [HIGH] CWE-416 CVE-2026-40382: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87712P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-87712 [HIGH] CWE-416 CVE-2026-87712: Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85933P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-85933 [HIGH] CWE-416 CVE-2026-85933: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27920P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27920 [HIGH] CWE-822 CVE-2026-27920: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72978P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.233982026-09-08
CVE-2026-72978 [HIGH] CWE-770 CVE-2026-72978: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-27910P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.231322026-04-14
CVE-2026-27910 [HIGH] CWE-280 CVE-2026-27910: Improper handling of insufficient permissions or privileges in Windows Installer allows an authorize
Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-24547P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.203372022-04-15
CVE-2022-24547 [HIGH] CVE-2022-24547: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2024-29066P3HIGHCVSS 7.2≥ 6.3.9600.0, < 6.3.9600.219242024-04-09
CVE-2024-29066 [HIGH] CWE-367 CVE-2024-29066: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2022-35751P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.205202023-05-31
CVE-2022-35751 [HIGH] CVE-2022-35751: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd