CVE Intelligence

Microsoft Windows Server 2012 R2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows Server 2012 R2: 1817 record(s), with affected versions and fixes.

CVE-2026-73025 Critical · 9.8 CWE-1390 Sep 8, 2026
Windows iSCSI Security Feature Bypass Vulnerability
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73024 High · 7.8 CWE-122 Sep 8, 2026
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-73023 High · 8.8 CWE-122 Sep 8, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73019 Medium · 4.3 CWE-41 Sep 8, 2026
Windows URL Moniker Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73018 High · 8.8 CWE-122 Sep 8, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-73016 High · 8.8 CWE-122 Sep 8, 2026
DirectWrite Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73013 High · 8.8 CWE-122 Sep 8, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73012 High · 8.8 CWE-122 Sep 8, 2026
Windows Management Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-73009 Critical · 9.8 CWE-416 Sep 8, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-72987 High · 8.1 CWE-416 Sep 8, 2026
Windows DNS Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-72986 High · 8.8 CWE-122 Sep 8, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-72985 Medium · 6.8 CWE-122 Sep 8, 2026
Volume Shadow Copy Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72983 Critical · 9.8 CWE-416 Sep 8, 2026
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72982 Critical · 9.8 CWE-121 Sep 8, 2026
Windows Netlogon Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72981 High · 8.1 CWE-416 Sep 8, 2026
IP Helper Remote Code Execution Vulnerability
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVE-2026-72979 Critical · 9.8 CWE-416 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72978 High · 7.5 CWE-770 Sep 8, 2026
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-72967 High · 7.8 CWE-122 Sep 8, 2026
Windows Network Connection Broker Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-72966 Medium · 5.5 CWE-862 Sep 8, 2026
Windows Remote Access Connection Manager Tampering Vulnerability
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
CVE-2026-72965 High · 7.8 CWE-416 Sep 8, 2026
Windows WebClient Service Elevation of Privilege Vulnerability
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72959 High · 8.8 CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72957 High · 7.8 CWE-122 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVE-2026-72954 High · 7.5 CWE-416 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72950 Critical · 9.8 CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72948 High · 7.8 CWE-23 Sep 8, 2026
Windows DNS Elevation of Privilege Vulnerability
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.