VYPR

Windows Server 2012

by Microsoft

CVEs (4,890)

  • CVE-2017-0147HigKEVMar 17, 2017
    Microsoft
    Windows
    risk 0.78cvss 7.5epss 1.00

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information…

  • CVE-2016-7255HigKEVNov 10, 2016
    Microsoft
    Windows
    risk 0.78cvss 7.8epss 0.81

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted…

  • CVE-2013-3918HigKEVNov 12, 2013
    Microsoft
    Windows
    risk 0.78cvss 8.8epss 0.74

    The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold…

  • CVE-2025-33073HigKEVJun 10, 2025
    Microsoft
    Windows SMB
    risk 0.77cvss 8.8epss 0.83

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

  • CVE-2018-8453HigKEVOct 10, 2018
    Microsoft
    Windows Server 2008
    risk 0.77cvss 7.8epss 0.70

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2018-8174HigKEVMay 9, 2018
    Microsoft
    Windows Server 2008
    risk 0.77cvss 7.5epss 0.88

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2016-0151HigKEVApr 12, 2016
    Microsoft
    Windows Server 2012
    risk 0.77cvss 7.8epss 0.63

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security…

  • CVE-2026-33824CriKEVApr 14, 2026
    Microsoft
    Windows IKE Extension
    risk 0.76cvss 9.8epss 0.02

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

  • CVE-2024-49039HigKEVNov 12, 2024
    Microsoft
    Windows Task Scheduler
    risk 0.76cvss 8.8epss 0.14

    Windows Task Scheduler Elevation of Privilege Vulnerability

  • CVE-2024-21338HigKEVFeb 13, 2024
    Microsoft
    Windows Kernel
    risk 0.76cvss 7.8epss 0.60

    Windows Kernel Elevation of Privilege Vulnerability

  • CVE-2023-36025HigKEVNov 14, 2023
    Microsoft
    Windows SmartScreen
    risk 0.76cvss 8.8epss 0.88

    Windows SmartScreen Security Feature Bypass Vulnerability

  • CVE-2023-28252HigKEVApr 11, 2023
    Microsoft
    Windows Common Log File System Driver
    risk 0.76cvss 7.8epss 0.49

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  • CVE-2023-36884HigKEVJul 11, 2023
    Microsoft
    Windows Search
    risk 0.75cvss 7.5epss 0.99

    Windows Search Remote Code Execution Vulnerability

  • CVE-2022-21999HigKEVFeb 9, 2022
    Microsoft
    Windows Print Spooler
    risk 0.75cvss 7.8epss 0.41

    Windows Print Spooler Elevation of Privilege Vulnerability

  • CVE-2021-36942HigKEVAug 12, 2021
    Microsoft
    Windows
    risk 0.75cvss 7.5epss 0.66

    Windows LSA Spoofing Vulnerability

  • CVE-2020-0787HigKEVMar 12, 2020
    Microsoft
    Windows Background Intelligent Transfer Service (BITS)
    risk 0.75cvss 7.8epss 0.43

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

  • CVE-2019-0803HigKEVApr 9, 2019
    Microsoft
    Windows
    risk 0.75cvss 7.8epss 0.45

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

  • CVE-2017-0213HigKEVMay 12, 2017
    Microsoft
    Windows Server 2008
    risk 0.75cvss 7.3epss 0.84

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an…

  • CVE-2016-0099HigKEVMar 9, 2016
    Microsoft
    Windows
    risk 0.75cvss 7.8epss 0.37

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain…

  • CVE-2023-21554CriApr 11, 2023
    Microsoft
    Message Queuing
    risk 0.74cvss 9.8epss 0.95

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Page 2 of 245