VendorsMicrosoftwindows_server_2012r2
Vulnerabilities

Microsoft Windows Server 2012 r2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4806CVEs
CVE-2024-38141
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8EPSS 0.037
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Published 2025-02-11 · Analyzed
7.8EPSS 0.037
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-09-12 · Analyzed
7.8EPSS 0.037
CVE-2016-0173
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0174, and CVE-2016-0196.
Published 2016-05-11 · Modified
7.81 PoCEPSS 0.037
CVE-2019-0735
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.037
CVE-2021-31975
Server for NFS Information Disclosure Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.037
CVE-2021-31976
Server for NFS Information Disclosure Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.037
CVE-2026-85880
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2026-09-08 · Analyzed
7.8KEVEPSS 0.036
CVE-2023-21688
NT OS Kernel Elevation of Privilege Vulnerability
Published 2023-02-14 · Modified
7.8EPSS 0.036
CVE-2016-0143
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0165 and CVE-2016-0167.
Published 2016-04-12 · Modified
7.81 PoCEPSS 0.036
CVE-2024-43560
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Published 2024-10-08 · Analyzed
7.8EPSS 0.036
CVE-2023-24912
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2023-04-11 · Modified
7.8EPSS 0.036
CVE-2021-26415
Windows Installer Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.036
CVE-2020-1487
Media Foundation Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.036
CVE-2023-35380
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.035
CVE-2023-21552
Windows GDI Elevation of Privilege Vulnerability
Published 2023-01-10 · Modified
7.8EPSS 0.035
CVE-2026-20843
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.035
CVE-2019-1315
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
Published 2019-10-10 · Analyzed
7.8KEVEPSS 0.035
CVE-2020-1492
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.035
CVE-2020-1554
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.035
CVE-2018-8405
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
Published 2018-08-15 · Analyzed
7.8KEVEPSS 0.034
CVE-2021-34504
Windows Address Book Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
7.8EPSS 0.034
CVE-2020-1212
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
7.8EPSS 0.034
CVE-2016-0093
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0094, CVE-2016-0095, and CVE-2016-0096.
Published 2016-03-09 · Modified
7.81 PoCEPSS 0.034
CVE-2016-0094
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-2016-0095, and CVE-2016-0096.
Published 2016-03-09 · Modified
7.81 PoCEPSS 0.034
CVE-2025-55692
Windows Error Reporting Service Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.034
CVE-2020-1231
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1304, CVE-2020-1306, CVE-2020-1334.
Published 2020-06-09 · Modified
7.8EPSS 0.034
CVE-2016-7185
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-3376, and CVE-2016-7211.
Published 2016-10-14 · Modified
7.81 PoCEPSS 0.034
CVE-2026-21238
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2026-02-10 · Analyzed
7.8EPSS 0.034
CVE-2024-29996
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2024-05-14 · Analyzed
7.8EPSS 0.034
CVE-2017-0165
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."
Published 2017-04-12 · Modified
7.81 PoCEPSS 0.033
CVE-2020-1379
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.033
CVE-2023-21812
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-02-14 · Modified
7.8EPSS 0.033
CVE-2018-8550
An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-11-14 · Modified
7.81 PoCEPSS 0.033
CVE-2020-1282
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306, CVE-2020-1334.
Published 2020-06-09 · Modified
7.8EPSS 0.033
CVE-2026-24291
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
Published 2026-03-10 · Modified
7.8EPSS 0.032
CVE-2016-3218
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3221.
Published 2016-06-16 · Modified
7.8EPSS 0.032
CVE-2018-0749
The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way SMB Server handles specially crafted files, aka "Windows Elevation of Privilege Vulnerability".
Published 2018-01-04 · Modified
7.81 PoCEPSS 0.032
CVE-2022-21989
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.032
CVE-2026-25187
Winlogon Elevation of Privilege Vulnerability
Published 2026-03-10 · Modified
7.8EPSS 0.032
← Prev36 / 121Next →