Windows Server 2012

CVEs (3,338)

• CVE-2026-47291CriJun 9, 2026
  Microsoft

  Windows HTTP.sys
  risk 0.64cvss 9.8epss 0.22

  Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

• CVE-2026-44815CriJun 9, 2026
  Microsoft

  Windows DHCP Client
  risk 0.64cvss 9.8epss 0.01

  Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.

• CVE-2026-41096CriMay 12, 2026
  Microsoft

  Windows
  risk 0.64cvss 9.8epss 0.02

  Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

• CVE-2026-41089CriMay 12, 2026
  Windows

  Netlogon
  risk 0.64cvss 9.8epss 0.72

  Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

• CVE-2026-33824CriApr 14, 2026
  Microsoft

  Windows IKE Extension
  risk 0.64cvss 9.8epss 0.56

  Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

• CVE-2025-60724CriNov 11, 2025
  Microsoft

  Graphics Component
  risk 0.64cvss 9.8epss 0.06

  Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

• CVE-2025-53766CriAug 12, 2025
  Microsoft

  Windows GDI+
  risk 0.64cvss 9.8epss 0.07

  Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

• CVE-2017-8682HigSep 13, 2017
  Microsoft

  Word Viewer
  risk 0.64cvss 8.8epss 0.50

  Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and…

• CVE-2017-0005HigKEVMar 17, 2017
  Microsoft

  Windows
  risk 0.64cvss 7.8epss 0.11

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…

• CVE-2016-7274HigDec 20, 2016
  Microsoft

  Windows
  risk 0.64cvss 8.8epss 0.42

  Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…

• CVE-2016-0170HigMay 11, 2016
  Microsoft

  Windows
  risk 0.64cvss 8.8epss 0.49

  GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…

• CVE-2016-0145HigApr 12, 2016
  Microsoft

  Office
  risk 0.64cvss 8.8epss 0.43

  The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…

• CVE-2023-36424HigKEVNov 14, 2023
  Microsoft

  Windows Common Log File System Driver
  risk 0.63cvss 7.8epss 0.12

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• CVE-2017-0283HigJun 15, 2017
  Microsoft

  Office
  risk 0.63cvss 8.8epss 0.39

  Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013…

• CVE-2017-0084HigMar 17, 2017
  Microsoft

  Windows
  risk 0.63cvss 8.8epss 0.37

  Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…

• CVE-2017-0001HigKEVMar 17, 2017
  Microsoft

  Windows
  risk 0.63cvss 7.8epss 0.03

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…

• CVE-2016-0121HigMar 9, 2016
  Microsoft

  Windows
  risk 0.63cvss 8.8epss 0.41

  The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType…

• CVE-2018-8420HigSep 13, 2018
  Microsoft

  Windows Server 2008
  risk 0.61cvss 8.8epss 0.49

  A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,…

• CVE-2016-0088CriApr 12, 2016
  Microsoft

  Windows Server 2012
  risk 0.61cvss 9.3epss 0.08

  Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."

• CVE-2016-7272HigDec 20, 2016
  Microsoft

  Windows
  risk 0.60cvss 8.8epss 0.39

  The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via…