Windows Server 2012 vulnerabilities

322 known vulnerabilities in Windows Server 2012 from Microsoft. 301 are rated high or critical, and 159 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2019-0543Jan 8, 2019MicrosoftEPSS 4.68%

  An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows S

• 7.8 High severity

  Microsoft Windows Win32k Improper Resource Shutdown or Release Exploited

  CVE-2018-8639Dec 12, 2018MicrosoftEPSS 22.3%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2018-8611Dec 12, 2018MicrosoftEPSS 4.2%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, W

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2018-8453Oct 10, 2018MicrosoftEPSS 70%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2018-8440Sep 13, 2018MicrosoftEPSS 18.5%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serve

• 7.8 High severity

  Microsoft DirectX Graphics Kernel Privilege Escalation Exploited

  CVE-2018-8405Aug 15, 2018MicrosoftEPSS 3.44%

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Wind

• 7.5 High severity

  Microsoft Windows VBScript Engine Out-of-Bounds Write Exploited

  CVE-2018-8174May 9, 2018MicrosoftEPSS 88.2%

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,

• 8.8 High severity

  Microsoft COM for Windows Deserialization of Untrusted Data Exploited

  CVE-2018-0824May 9, 2018MicrosoftEPSS 73%

  A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1

• 9.8 Critical severity

  Microsoft Windows Search Remote Code Execution Exploited

  CVE-2017-8543Jun 15, 2017MicrosoftEPSS 74.2%

  Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows S

• 8.8 High severity

  Microsoft Windows Shell (.lnk) Remote Code Execution Exploited

  CVE-2017-8464Jun 15, 2017MicrosoftEPSS 90%

  Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2017-0263May 12, 2017MicrosoftEPSS 10%

  The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted

• 7.3 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2017-0213May 12, 2017MicrosoftEPSS 84.3%

  Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerabi

• 7.8 High severity

  Microsoft Office and WordPad Remote Code Execution Exploited

  CVE-2017-0199Apr 12, 2017MicrosoftEPSS 99.5%

  Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, ak

• 7.5 High severity

  Microsoft Windows SMBv1 Information Disclosure Exploited

  CVE-2017-0147Mar 17, 2017MicrosoftEPSS 99.7%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sen

• 6.5 Medium severity

  Microsoft XML Core Services Information Disclosure Exploited

  CVE-2017-0022Mar 17, 2017MicrosoftEPSS 18.1%

  Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in me

• 7.8 High severity

  Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Exploited

  CVE-2017-0005Mar 17, 2017MicrosoftEPSS 11%

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

• 7.8 High severity

  Microsoft Graphics Device Interface (GDI) Privilege Escalation Exploited

  CVE-2017-0001Mar 17, 2017MicrosoftEPSS 3.11%

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

• 8.8 High severity

  Microsoft Windows Open Type Font Remote Code Execution Exploited

  CVE-2016-7256Nov 10, 2016MicrosoftEPSS 64.6%

  atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attack

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-7255Nov 10, 2016MicrosoftEPSS 81%

  The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileg

• 7.8 High severity

  Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Exploited

  CVE-2016-3393Oct 14, 2016MicrosoftEPSS 68.5%

  Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2016-3309Aug 9, 2016MicrosoftEPSS 20.5%

  The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted appl

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-0167Apr 12, 2016MicrosoftEPSS 5.66%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-0165Apr 12, 2016MicrosoftEPSS 13.7%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

• 7.8 High severity

  Microsoft Windows CSRSS Security Feature Bypass Exploited

  CVE-2016-0151Apr 12, 2016MicrosoftEPSS 62.8%

  The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows

• 7.8 High severity

  Microsoft Windows Secondary Logon Service Privilege Escalation Exploited

  CVE-2016-0099Mar 9, 2016MicrosoftEPSS 37%

  The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows lo

• 6.9 Medium severity

  Microsoft Win32k Memory Corruption Exploited

  CVE-2015-2546Sep 9, 2015MicrosoftEPSS 10.1%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted appli

• 7.2 High severity

  Microsoft Windows Mount Manager Privilege Escalation Exploited

  CVE-2015-1769Aug 15, 2015MicrosoftEPSS 4.08%

  Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers t

• 9.3 High severity

  Microsoft Windows Adobe Type Manager Library Remote Code Execution Exploited

  CVE-2015-2426Jul 20, 2015MicrosoftEPSS 86.6%

  Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attack

• 7.8 High severity

  Microsoft ATM Font Driver Privilege Escalation Exploited

  CVE-2015-2387Jul 14, 2015MicrosoftEPSS 34.9%

  ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2015-2360Jun 10, 2015MicrosoftEPSS 14.8%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 10.0 High severity

  Microsoft HTTP.sys Remote Code Execution Exploited

  CVE-2015-1635Apr 14, 2015MicrosoftEPSS 100%

  HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

• 7.8 High severity

  Microsoft Windows TS WebProxy Directory Traversal Exploited

  CVE-2015-0016Jan 13, 2015MicrosoftEPSS 75.8%

  Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attacker

• 9.0 High severity

  Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Exploited

  CVE-2014-6324Nov 18, 2014MicrosoftEPSS 87.3%

  The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtai

• 9.3 High severity

  Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Exploited

  CVE-2014-6332Nov 11, 2014MicrosoftEPSS 94.9%

  OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary co

• 7.8 High severity

  Microsoft Windows Code Injection Exploited

  CVE-2014-6352Oct 22, 2014MicrosoftEPSS 77.5%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the

• 8.8 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2014-4148Oct 15, 2014MicrosoftEPSS 59.9%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to ex

• 9.3 High severity

  Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Exploited

  CVE-2014-4114Oct 15, 2014MicrosoftEPSS 81.6%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2014-4113Oct 15, 2014MicrosoftEPSS 86.6%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain pr

• 9.0 High severity

  Microsoft Windows Group Policy Preferences Password Privilege Escalation Exploited

  CVE-2014-1812May 14, 2014MicrosoftEPSS 65.1%

  The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo