Windows Server 2012@r2 Security Vulnerabilities and Issues — Page 48 of Windows Server 2012@r2 CVE List

7.5CVSS7.8AI score0.03672EPSS

CVE-2023-32034

Remote Procedure Call Runtime Denial of Service Vulnerability

7.5CVSS8.4AI score0.03228EPSS

CVE-2023-32045

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.8AI score0.03672EPSS

CVE-2023-33169

Remote Procedure Call Runtime Denial of Service Vulnerability

6.6CVSS8.1AI score0.00293EPSS

CVE-2023-35351

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

5.5CVSS7AI score0.00538EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-38065

Secure Boot Security Feature Bypass Vulnerability

6.8CVSS7.4AI score0.00316EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-38071

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5CVSS8.5AI score0.20182EPSS

5.5CVSS5.2AI score0.00707EPSS

CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

7.8CVSS7.7AI score0.00962EPSS

CVE-2024-38141

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.5CVSS7.5AI score0.27186EPSS

CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

5.5CVSS5.3AI score0.00348EPSS

CVE-2024-38151

Windows Kernel Information Disclosure Vulnerability

CVE•added 2024/12/12 2:4 a.m.•89 views

CVE-2024-49127

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00334EPSS

CVE•added 2015/01/13 10:59 p.m.•88 views

CVE-2015-0015

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server (NPS), aka "Network P...

7.8CVSS6.7AI score0.38142EPSS

CVE•added 2016/05/11 1:59 a.m.•88 views

CVE-2016-0173

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vu...

7.8CVSS7.5AI score0.04066EPSS

CVE•added 2016/09/14 10:59 a.m.•88 views

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a (1) crafted Wi-Fi access point or (2)...

6.3CVSS6.9AI score0.00832EPSS

CVE•added 2016/11/10 6:59 a.m.•88 views

CVE-2016-3335

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted appl...

9.3CVSS7.5AI score0.1385EPSS

CVE•added 2017/03/17 12:59 a.m.•88 views

CVE-2017-0023

The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."

7.6CVSS7.8AI score0.27879EPSS

CVE•added 2018/11/14 1:29 a.m.•88 views

CVE-2018-8563

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2008 R2.

5.5CVSS6.7AI score0.00758EPSS

7.8CVSS7.6AI score0.00817EPSS

CVE-2019-1394

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1393, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434.

7.8CVSS7.6AI score0.00817EPSS

CVE-2019-1396

7.8CVSS8.5AI score0.00404EPSS

CVE-2019-1435

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407, CVE-2019-1433, CVE-2019-1437, CVE-2019-1438.

7.8CVSS8.5AI score0.00404EPSS

CVE-2019-1438

CVE•added 2020/02/11 10:15 p.m.•88 views

CVE-2020-0719

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE...

7.8CVSS7.7AI score0.00549EPSS

CVE•added 2020/03/12 4:15 p.m.•88 views

CVE-2020-0772

An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CV...

7.8CVSS8.7AI score0.0038EPSS

6.5CVSS7.2AI score0.18824EPSS

CVE-2020-0856

An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.To exploit this condition, an authen...

CVE•added 2020/03/12 4:15 p.m.•88 views

CVE-2020-0859

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.00978EPSS

5.5CVSS6.8AI score0.00702EPSS

CVE-2020-1038

A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.To exploit this vulnerability, an attacker would have to log on to an affected system...

9.3CVSS8.3AI score0.31961EPSS

CVE-2020-1074

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE•added 2020/05/21 11:15 p.m.•88 views

CVE-2020-1136

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126, CVE-2020-1150.

9.3CVSS8.1AI score0.23624EPSS