Windows Server 2012 (Server Core installation) vulnerabilities
230 known vulnerabilities in Windows Server 2012 (Server Core installation) from Microsoft. 214 are rated high or critical, and 83 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- 7.2 High severity
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Exploited
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The
- 5.9 Medium severity
Microsoft Windows LSA Spoofing Exploited
Windows LSA Spoofing Vulnerability
- 4.4 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows CLFS Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.2 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 6.9 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Installer Privilege Escalation Exploited
Windows Installer Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft MSHTML Remote Code Execution Exploited
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An at
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Windows Local Security Authority (LSA) Spoofing Exploited
Windows LSA Spoofing Vulnerability
- 7.8 High severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Kernel Privilege Escalation Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Print Spooler Remote Code Execution Exploited
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the
- 7.8 High severity
Microsoft Windows NTFS Privilege Escalation Exploited
Windows NTFS Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Remote Code Execution Exploited
Windows Print Spooler Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Kernel Privilege Escalation Exploited
Windows Kernel Local Elevation of Privilege Vulnerability
- 10.0 Critical severity
Microsoft Netlogon Privilege Escalation Exploited
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run
- 5.5 Medium severity
Microsoft Windows Spoofing Exploited
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secur
- 7.8 High severity
Microsoft Win32k Privilege Escalation Exploited
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then
- 8.8 High severity
Microsoft WinVerifyTrust function Remote Code Execution Exploited
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo