VendorsMicrosoftwindows_server_2012all versions
Vulnerabilities

Microsoft Windows Server 2012

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4997CVEs
CVE-2021-26861
Windows Graphics Component Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.027
CVE-2020-1478
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.027
CVE-2020-1531
Windows Accounts Control Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.027
CVE-2019-0555
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Published 2019-01-08 · Modified
7.81 PoCEPSS 0.027
CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8KEVEPSS 0.027
CVE-2019-0881
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Modified
7.81 PoCEPSS 0.026
CVE-2016-3310
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3311.
Published 2016-08-09 · Modified
7.8EPSS 0.026
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Published 2021-06-08 · Analyzed
7.8KEVEPSS 0.026
CVE-2020-1015
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
Published 2020-04-15 · Modified
7.8EPSS 0.026
CVE-2026-20820
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.026
CVE-2026-21231
Windows Kernel Elevation of Privilege Vulnerability
Published 2026-02-10 · Analyzed
7.8EPSS 0.026
CVE-2024-30038
Win32k Elevation of Privilege Vulnerability
Published 2024-05-14 · Analyzed
7.8EPSS 0.026
CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability
Published 2023-01-10 · Modified
7.8EPSS 0.025
CVE-2020-1477
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.025
CVE-2020-1565
Windows Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.025
CVE-2016-0174
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0173, and CVE-2016-0196.
Published 2016-05-11 · Modified
7.8EPSS 0.025
CVE-2026-20816
Windows Installer Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.025
CVE-2021-40465
Windows Text Shaping Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2025-24052
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.025
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2020-16939
Group Policy Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.024
CVE-2016-0014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Elevation of Privilege Vulnerability."
Published 2016-01-13 · Modified
7.8EPSS 0.024
CVE-2025-60705
Windows Client-Side Caching Elevation of Privilege Vulnerability
Published 2025-11-11 · Analyzed
7.8EPSS 0.024
CVE-2021-40476
Windows AppContainer Elevation Of Privilege Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.024
CVE-2017-0079
The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0078
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0081
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2019-0943
Windows ALPC Elevation of Privilege Vulnerability
Published 2019-06-12 · Modified
7.81 PoCEPSS 0.024
CVE-2017-8465
Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8468.
Published 2017-06-15 · Modified
7.8EPSS 0.023
CVE-2016-3355
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevation of Privilege Vulnerability."
Published 2016-09-14 · Modified
7.8EPSS 0.023
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.023
CVE-2020-0753
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.
Published 2020-02-11 · Modified
7.8EPSS 0.023
CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.023
CVE-2025-54916
Windows NTFS Remote Code Execution Vulnerability
Published 2025-09-09 · Analyzed
7.8EPSS 0.023
CVE-2019-0880
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Published 2019-07-15 · Analyzed
7.8KEVEPSS 0.023
CVE-2021-36937
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.023
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-11-09 · Analyzed
7.8KEVEPSS 0.023
CVE-2021-27089
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.023
CVE-2020-0887
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
Published 2020-03-12 · Modified
7.8EPSS 0.022
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
Published 2025-12-09 · Modified
7.8EPSS 0.022
← Prev40 / 125Next →