CVE Intelligence

Microsoft Windows Server 2012 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows Server 2012: 1871 record(s), with affected versions and fixes.
cpe:2.3:o:microsoft:windows_server_2012

CVE-2025-47827 Medium · 4.6 KEV High · 58 Public exploit CWE-347 Jun 5, 2025
IGEL OS Use of a Key Past its Expiration Date Vulnerability
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
CVE-2025-32709 High · 7.8 KEV High · 59 Public exploit CWE-416 May 13, 2025
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706 High · 7.8 KEV High · 54 CWE-20 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-32701 High · 7.8 KEV High · 52 CWE-416 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30397 High · 7.5 KEV Urgent · 70 Public exploit CWE-843 May 13, 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-29824 High · 7.8 KEV Urgent · 72 Public exploit Ransomware CWE-416 Apr 8, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-26633 High · 7.0 KEV Urgent · 80 Public exploit Ransomware CWE-707 Mar 11, 2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24991 Medium · 5.5 KEV High · 50 CWE-125 Mar 11, 2025
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24993 High · 7.8 KEV High · 53 CWE-122 Mar 11, 2025
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24984 Medium · 4.6 KEV High · 50 CWE-532 Mar 11, 2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985 High · 7.8 KEV High · 61 Public exploit CWE-122 Mar 11, 2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24983 High · 7.0 KEV High · 53 CWE-416 Mar 11, 2025
Microsoft Windows Win32k Use-After-Free Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24054 Medium · 5.4 KEV High · 67 Public exploit CWE-73 Mar 11, 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21418 High · 7.8 KEV High · 53 CWE-122 Feb 11, 2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-49138 High · 7.8 KEV Urgent · 70 Public exploit CWE-122 Dec 11, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-43451 Medium · 6.5 KEV High · 59 Public exploit CWE-73 Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43572 High · 7.8 KEV High · 56 CWE-707 Oct 8, 2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573 High · 8.1 KEV High · 56 CWE-79 Oct 8, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43461 High · 8.8 KEV High · 56 CWE-451 Sep 10, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38217 Medium · 5.4 KEV High · 52 CWE-693 Sep 10, 2024
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38014 High · 7.8 KEV High · 55 CWE-269 Sep 10, 2024
Microsoft Windows Installer Improper Privilege Management Vulnerability
Windows Installer Elevation of Privilege Vulnerability
CVE-2024-38213 Medium · 6.5 KEV High · 52 CWE-693 Aug 13, 2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38193 High · 7.8 KEV Urgent · 70 Public exploit CWE-416 Aug 13, 2024
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38178 High · 7.5 KEV High · 56 CWE-843 Aug 13, 2024
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
CVE-2024-38107 High · 7.8 KEV High · 52 CWE-416 Aug 13, 2024
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability