VendorsMicrosoftwindows_server_2012r2
Vulnerabilities

Microsoft Windows Server 2012 r2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4806CVEs
CVE-2022-38044
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.563
CVE-2020-1054
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.
Published 2020-05-21 · Analyzed
7.8KEVEPSS 0.542
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-04-11 · Analyzed
7.8KEVEPSS 0.490
CVE-2019-0803
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.
Published 2019-04-09 · Analyzed
7.8KEV1 PoCEPSS 0.450
CVE-2022-21993
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.436
CVE-2016-3225
The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication request to an unintended service, aka "Windows SMB Server Elevation of Privilege Vulnerability."
Published 2016-06-16 · Modified
7.81 PoCEPSS 0.435
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
Published 2023-07-11 · Analyzed
7.8KEVEPSS 0.434
CVE-2020-0787
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
Published 2020-03-12 · Analyzed
7.8KEVEPSS 0.425
CVE-2022-44666
Windows Contacts Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
7.8EPSS 0.414
CVE-2022-21999
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-02-09 · Analyzed
7.8KEVEPSS 0.410
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability
Published 2023-05-09 · Analyzed
7.8KEV1 PoCEPSS 0.409
CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
Published 2021-01-12 · Analyzed
7.8KEVEPSS 0.394
CVE-2020-1464
Windows Spoofing Vulnerability
Published 2020-08-17 · Analyzed
7.8KEVEPSS 0.389
CVE-2016-0099
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."
Published 2016-03-09 · Analyzed
7.8KEV4 PoCEPSS 0.368
CVE-2015-2387
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "ATMFD.DLL Memory Corruption Vulnerability."
Published 2015-07-14 · Analyzed
7.8KEVEPSS 0.349
CVE-2018-5391
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
Published 2018-09-06 · Modified
7.8EPSS 0.324
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
Published 2019-11-12 · Analyzed
7.8KEV2 PoCEPSS 0.300
CVE-2016-0016
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
Published 2016-01-13 · Modified
7.81 PoCEPSS 0.297
CVE-2024-38193
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8KEV1 PoCEPSS 0.285
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-09-13 · Analyzed
7.8KEVEPSS 0.283
CVE-2020-17047
Windows Network File System Denial of Service Vulnerability
Published 2020-11-11 · Modified
7.8EPSS 0.271
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2024-12-10 · Analyzed
7.8KEV1 PoCEPSS 0.262
CVE-2020-0668
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
Published 2020-02-11 · Modified
7.8EPSS 0.259
CVE-2018-8210
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8213.
Published 2018-06-14 · Modified
7.8EPSS 0.252
CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Published 2024-06-11 · Analyzed
7.8KEVEPSS 0.250
CVE-2022-21881
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.242
CVE-2024-26230
Windows Telephony Server Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.241
CVE-2022-35803
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.238
CVE-2016-0091
OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2016-0092.
Published 2016-03-09 · Modified
7.8EPSS 0.231
CVE-2016-0051
The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."
Published 2016-02-10 · Modified
7.83 PoCEPSS 0.228
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability
Published 2021-08-12 · Analyzed
7.8KEVEPSS 0.218
CVE-2016-3309
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.
Published 2016-08-09 · Analyzed
7.8KEV1 PoCEPSS 0.205
CVE-2021-41379
Windows Installer Elevation of Privilege Vulnerability
Published 2021-11-10 · Analyzed
7.8KEVEPSS 0.195
CVE-2019-1215
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.
Published 2019-09-11 · Analyzed
7.8KEV1 PoCEPSS 0.193
CVE-2022-22047
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Published 2022-07-12 · Analyzed
7.8KEVEPSS 0.188
CVE-2022-22718
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-02-09 · Analyzed
7.8KEVEPSS 0.185
CVE-2018-8440
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Analyzed
7.8KEVEPSS 0.184
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2023-11-14 · Analyzed
7.8KEVEPSS 0.167
CVE-2022-24481
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.166
CVE-2020-1048
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
Published 2020-05-21 · Modified
7.8EPSS 0.164
← Prev32 / 121Next →