VendorsMicrosoftwindows_server_2012r2
Vulnerabilities

Microsoft Windows Server 2012 r2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4806CVEs
CVE-2020-1034
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.049
CVE-2023-29358
Windows GDI Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
7.8EPSS 0.047
CVE-2019-0543
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2019-01-08 · Analyzed
7.8KEV1 PoCEPSS 0.047
CVE-2026-24294
Windows SMB Server Elevation of Privilege Vulnerability
Published 2026-03-10 · Modified
7.8EPSS 0.047
CVE-2026-20840
Windows NTFS Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.047
CVE-2020-1027
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
Published 2020-04-15 · Analyzed
7.8KEVEPSS 0.045
CVE-2021-31979
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-07-14 · Analyzed
7.8KEVEPSS 0.045
CVE-2022-30147
Windows Installer Elevation of Privilege Vulnerability
Published 2022-06-15 · Modified
7.8EPSS 0.045
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
Published 2024-11-12 · Analyzed
7.8EPSS 0.045
CVE-2024-20653
Microsoft Common Log File System Elevation of Privilege Vulnerability
Published 2024-01-09 · Modified
7.8EPSS 0.045
CVE-2026-24289
Windows Kernel Elevation of Privilege Vulnerability
Published 2026-03-10 · Analyzed
7.8EPSS 0.045
CVE-2019-0730
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2019-0731
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.043
CVE-2019-0836
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.043
CVE-2016-0095
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-2016-0094, and CVE-2016-0096.
Published 2016-03-09 · Modified
7.8EPSS 0.043
CVE-2024-30025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2024-05-14 · Modified
7.8EPSS 0.043
CVE-2024-30091
Win32k Elevation of Privilege Vulnerability
Published 2024-06-11 · Modified
7.8EPSS 0.043
CVE-2024-20683
Win32k Elevation of Privilege Vulnerability
Published 2024-01-09 · Modified
7.8EPSS 0.042
CVE-2018-8611
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-12-12 · Analyzed
7.8KEVEPSS 0.042
CVE-2019-0859
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
Published 2019-04-09 · Analyzed
7.8KEVEPSS 0.042
CVE-2026-21533
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Published 2026-02-10 · Analyzed
7.8KEVEPSS 0.041
CVE-2024-26211
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.041
CVE-2021-27095
Windows Media Video Decoder Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.041
CVE-2026-50649
.NET Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2026-50646
.NET Framework Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
Published 2024-03-12 · Analyzed
7.8KEVEPSS 0.040
CVE-2023-36743
Win32k Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.040
CVE-2017-8591
Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution Vulnerability".
Published 2017-08-08 · Modified
7.8EPSS 0.040
CVE-2020-1466
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
CVE-2022-21880
Windows GDI+ Information Disclosure Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.039
CVE-2020-1252
Windows Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.039
CVE-2020-1378
Windows Registry Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8KEVEPSS 0.038
CVE-2020-16923
Microsoft Graphics Components Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.038
CVE-2016-0171
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0173, CVE-2016-0174, and CVE-2016-0196.
Published 2016-05-11 · Modified
7.81 PoCEPSS 0.038
CVE-2019-0732
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.038
CVE-2017-8714
The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability".
Published 2017-09-13 · Modified
7.8EPSS 0.038
CVE-2021-1665
GDI+ Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.038
CVE-2023-38144
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-09-12 · Analyzed
7.8EPSS 0.037
← Prev35 / 121Next →