Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs

4,050

CISA KEV

101

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

SortPage 92 of 203

CVE-2024-49019P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.222672024-11-12

CVE-2024-49019 [HIGH] CWE-1390 CVE-2024-49019: Active Directory Certificate Services Elevation of Privilege Vulnerability Active Directory Certificate Services Elevation of Privilege Vulnerability

nvd

CVE-2022-22037P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.204782022-07-12

CVE-2022-22037 [HIGH] CVE-2022-22037: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

nvd

CVE-2024-38127P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.221342024-08-13

CVE-2024-38127 [HIGH] CWE-126 CVE-2024-38127: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability

nvd

CVE-2021-28315P3HIGHCVSS 7.8≥ 6.3.0, < publication2021-04-13

CVE-2021-28315 [HIGH] CVE-2021-28315: Windows Media Video Decoder Remote Code Execution Vulnerability Windows Media Video Decoder Remote Code Execution Vulnerability

nvd

CVE-2022-30209P3HIGHCVSS 7.4≥ 6.3.9600.0, < 6.3.9600.204782022-07-12

CVE-2022-30209 [HIGH] CVE-2022-30209: Windows IIS Server Elevation of Privilege Vulnerability Windows IIS Server Elevation of Privilege Vulnerability

nvd

CVE-2025-27470P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-27470 [HIGH] CWE-400 CVE-2025-27470: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-26652P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-26652 [HIGH] CWE-400 CVE-2025-26652: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2022-30142P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.204022022-06-15

CVE-2022-30142 [HIGH] CVE-2022-30142: Windows File History Remote Code Execution Vulnerability Windows File History Remote Code Execution Vulnerability

nvd

CVE-2025-27479P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-27479 [HIGH] CWE-410 CVE-2025-27479: Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-21174P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-21174 [HIGH] CWE-400 CVE-2025-21174: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-27486P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-27486 [HIGH] CWE-400 CVE-2025-27486: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-27485P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-27485 [HIGH] CWE-400 CVE-2025-27485: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-48573P3HIGHCVSS 7.9≥ 6.3.9600.0, < 6.3.9600.232282026-06-09

CVE-2026-48573 [HIGH] CWE-1329 CVE-2026-48573: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2026-48576P3HIGHCVSS 7.9≥ 6.3.9600.0, < 6.3.9600.232282026-06-09

CVE-2026-48576 [HIGH] CWE-1329 CVE-2026-48576: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2025-26680P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-26680 [HIGH] CWE-400 CVE-2025-26680: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2022-37978P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.206252022-10-11

CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass

nvd

CVE-2023-24932MEDIUMCVSS 6.7Exploited≥ 6.3.9600.0, < 6.3.9600.226762023-05-09

CVE-2023-24932 [MEDIUM] Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability

cvelistv5

CVE-2025-27727P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.225232025-04-08

CVE-2025-27727 [HIGH] CWE-59 CVE-2025-27727: Improper link resolution before file access ('link following') in Windows Installer allows an author Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-33068P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226202025-06-10

CVE-2025-33068 [HIGH] CWE-400 CVE-2025-33068: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an un Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-49716P3HIGHCVSS 7.5≥ 6.3.9600.0, < 6.3.9600.226762025-07-08

CVE-2025-49716 [HIGH] CWE-400 CVE-2025-49716: Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny servic Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

nvd

← Previous92 / 203Next →