Windows Server 2012@* Security Vulnerabilities and Issues — Windows Server 2012@* CVE List

Lucene search

MicrosoftWindows Server 2012*

146 matches found

CVE•added 2020/11/11 7:15 a.m.•974 views

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...

9CVSS6.8AI score0.21753EPSS

In wild

CVE•added 2024/08/13 6:15 p.m.•946 views

CVE-2024-38063

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.8AI score0.88095EPSS

CVE•added 2024/08/13 6:15 p.m.•279 views

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.6447EPSS

In wild

CVE•added 2024/08/13 6:15 p.m.•279 views

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability

6.5CVSS6.5AI score0.71603EPSS

In wild

CVE•added 2020/11/11 7:15 a.m.•274 views

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.18017EPSS

CVE•added 2018/05/09 7:29 p.m.•273 views

CVE-2018-8166

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, W...

7CVSS7.4AI score0.94149EPSS

In wild

CVE•added 2018/05/09 7:29 p.m.•266 views

CVE-2018-8164

7.8CVSS7.4AI score0.94149EPSS

In wild

CVE•added 2024/08/13 6:15 p.m.•250 views

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS5.2AI score0.00585EPSS

CVE•added 2024/08/13 6:15 p.m.•244 views

CVE-2024-38107

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.02336EPSS

In wild

CVE•added 2024/02/13 6:15 p.m.•241 views

CVE-2024-21358

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.0192EPSS

CVE•added 2024/03/12 5:15 p.m.•235 views

CVE-2024-26174

Windows Kernel Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00346EPSS

CVE•added 2024/09/10 5:15 p.m.•225 views

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability

7.8CVSS8.6AI score0.00558EPSS

CVE•added 2024/02/13 6:15 p.m.•224 views

CVE-2024-21406

Windows Printing Service Spoofing Vulnerability

7.5CVSS7.7AI score0.01257EPSS

CVE•added 2024/08/13 6:15 p.m.•187 views

CVE-2024-38153

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0034EPSS

CVE•added 2017/08/08 9:29 p.m.•172 views

CVE-2017-0174

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS De...

6.5CVSS6.9AI score0.00479EPSS

CVE•added 2024/08/13 6:15 p.m.•168 views

CVE-2024-29995

Windows Kerberos Elevation of Privilege Vulnerability

8.1CVSS8.2AI score0.04764EPSS

CVE•added 2020/11/11 7:15 a.m.•163 views

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.17242EPSS

CVE•added 2024/08/13 6:15 p.m.•150 views

CVE-2024-38199

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

9.8CVSS9.8AI score0.12806EPSS

CVE•added 2024/08/13 6:15 p.m.•149 views

CVE-2024-37968

Windows DNS Spoofing Vulnerability

7.5CVSS7.5AI score0.09416EPSS

CVE•added 2024/08/13 6:15 p.m.•141 views

CVE-2024-38144

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

8.8CVSS8.8AI score0.77429EPSS

CVE•added 2024/08/13 6:15 p.m.•136 views

CVE-2024-38131

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

8.8CVSS9AI score0.01304EPSS

CVE•added 2017/04/12 2:59 p.m.•129 views

CVE-2017-0211

An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE Elevation of Privilege Vulnerability."

5.5CVSS6.4AI score0.21417EPSS

CVE•added 2018/02/15 2:29 a.m.•129 views

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka "Window...

7CVSS6.8AI score0.00564EPSS

CVE•added 2024/08/13 6:15 p.m.•129 views

CVE-2024-38152

Windows OLE Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01414EPSS

CVE•added 2017/04/12 2:59 p.m.•128 views

CVE-2017-0158

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability."

7.6CVSS7.5AI score0.20303EPSS

CVE•added 2024/08/13 6:15 p.m.•126 views

CVE-2024-38196

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.02608EPSS

CVE•added 2024/08/13 6:15 p.m.•125 views

CVE-2024-38140

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

9.8CVSS9.8AI score0.13082EPSS

CVE•added 2018/05/09 7:29 p.m.•123 views

CVE-2018-0959

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serv...

7.6CVSS7.9AI score0.2488EPSS

CVE•added 2018/05/09 7:29 p.m.•120 views

CVE-2018-8167

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server...

7CVSS7.3AI score0.00663EPSS

CVE•added 2017/04/12 2:59 p.m.•119 views

CVE-2017-0181

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is uniq...

7.6CVSS7.8AI score0.00421EPSS

CVE•added 2018/03/14 5:29 p.m.•117 views

CVE-2018-0898

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.11699EPSS

CVE•added 2024/08/13 6:15 p.m.•116 views

CVE-2024-38115

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

8.8CVSS9AI score0.06843EPSS

CVE•added 2017/10/13 1:29 p.m.•115 views

CVE-2017-11771

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly ...

10CVSS9.6AI score0.65606EPSS

CVE•added 2018/02/15 2:29 a.m.•114 views

CVE-2018-0825

StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how objects are handled in m...

7.6CVSS7.3AI score0.35752EPSS

CVE•added 2024/08/13 6:15 p.m.•114 views

CVE-2024-38127

Windows Hyper-V Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.20354EPSS

CVE•added 2018/02/15 2:29 a.m.•113 views

CVE-2018-0846

The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability ...

7.8CVSS6.8AI score0.00344EPSS

CVE•added 2024/08/13 6:15 p.m.•113 views

CVE-2024-38117

NTFS Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0075EPSS

CVE•added 2017/04/12 2:59 p.m.•111 views

CVE-2017-0180

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-01...

7.6CVSS7.9AI score0.00421EPSS

CVE•added 2024/08/13 6:15 p.m.•111 views

CVE-2024-38198

Windows Print Spooler Elevation of Privilege Vulnerability

7.5CVSS7.6AI score0.01448EPSS

CVE•added 2018/03/14 5:29 p.m.•109 views

CVE-2018-0897

4.7CVSS4.7AI score0.11699EPSS

CVE•added 2018/03/14 5:29 p.m.•108 views

CVE-2018-0811

5.5CVSS4.8AI score0.11699EPSS

CVE•added 2018/09/13 12:29 a.m.•108 views

CVE-2018-8424

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

6.5CVSS6.3AI score0.20294EPSS

CVE•added 2018/09/13 12:29 a.m.•108 views

CVE-2018-8434

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows...

5.4CVSS5.5AI score0.01426EPSS

CVE•added 2017/12/12 9:29 p.m.•106 views

CVE-2017-11927

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines th...

6.5CVSS6.9AI score0.25961EPSS

CVE•added 2018/03/14 5:29 p.m.•106 views

CVE-2018-0813

5.5CVSS4.8AI score0.11699EPSS

CVE•added 2024/08/13 6:15 p.m.•106 views

CVE-2024-38121

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS9AI score0.076EPSS

CVE•added 2024/08/13 6:15 p.m.•106 views

CVE-2024-38180

Windows SmartScreen Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.06469EPSS

CVE•added 2024/08/13 6:15 p.m.•106 views

CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.004EPSS

CVE•added 2018/03/14 5:29 p.m.•105 views

CVE-2018-0896

4.7CVSS4.7AI score0.11699EPSS

CVE•added 2017/04/12 2:59 p.m.•104 views

CVE-2017-0166

An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elev...

9.3CVSS7.9AI score0.01531EPSS

Total number of security vulnerabilities146