VYPR

Windows Server 2012

by Microsoft

CVEs (4,861)

  • CVE-2017-0147HigKEVMar 17, 2017
    risk 0.78cvss 7.5epss 1.00

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information…

  • CVE-2013-3918HigKEVNov 12, 2013
    risk 0.78cvss 8.8epss 0.74

    The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold…

  • CVE-2025-33073HigKEVJun 10, 2025
    risk 0.77cvss 8.8epss 0.80

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

  • CVE-2018-8453HigKEVOct 10, 2018
    risk 0.77cvss 7.8epss 0.70

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2018-8174HigKEVMay 9, 2018
    risk 0.77cvss 7.5epss 0.89

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2016-0151HigKEVApr 12, 2016
    risk 0.77cvss 7.8epss 0.63

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security…

  • CVE-2024-49039HigKEVNov 12, 2024
    risk 0.76cvss 8.8epss 0.14

    Windows Task Scheduler Elevation of Privilege Vulnerability

  • CVE-2024-21338HigKEVFeb 13, 2024
    risk 0.76cvss 7.8epss 0.60

    Windows Kernel Elevation of Privilege Vulnerability

  • CVE-2023-36025HigKEVNov 14, 2023
    risk 0.76cvss 8.8epss 0.88

    Windows SmartScreen Security Feature Bypass Vulnerability

  • CVE-2023-28252HigKEVApr 11, 2023
    risk 0.76cvss 7.8epss 0.49

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  • CVE-2023-36884HigKEVJul 11, 2023
    risk 0.75cvss 7.5epss 0.99

    Windows Search Remote Code Execution Vulnerability

  • CVE-2022-21999HigKEVFeb 9, 2022
    risk 0.75cvss 7.8epss 0.42

    Windows Print Spooler Elevation of Privilege Vulnerability

  • CVE-2021-36942HigKEVAug 12, 2021
    risk 0.75cvss 7.5epss 0.66

    Windows LSA Spoofing Vulnerability

  • CVE-2020-0787HigKEVMar 12, 2020
    risk 0.75cvss 7.8epss 0.43

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

  • CVE-2017-0213HigKEVMay 12, 2017
    risk 0.75cvss 7.3epss 0.84

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an…

  • CVE-2016-0099HigKEVMar 9, 2016
    risk 0.75cvss 7.8epss 0.37

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain…

  • CVE-2023-21554CriApr 11, 2023
    risk 0.74cvss 9.8epss 0.95

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  • CVE-2020-1020HigKEVApr 15, 2020
    risk 0.74cvss 8.8epss 0.65

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…

  • CVE-2019-1405HigKEVNov 12, 2019
    risk 0.74cvss 7.8epss 0.30

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

  • CVE-2016-7256HigKEVNov 10, 2016
    risk 0.74cvss 8.8epss 0.65

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute…

Page 2 of 244