CVE-20XX-?

Microsoft Windows Server 2012 CVEs.

Published CVEs affecting Microsoft Windows Server 2012, ranked by exploit odds.

57 CVEs · updated 2026-11-06 02:16 UTC

  1. CVE-2025-59287

    Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

    Drop everything exploited Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 100% exploit odds Fix listed
  2. CVE-2026-41089

    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

    Drop everything Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 80% exploit odds Fix listed
  3. CVE-2025-30394

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    5.9 MEDIUM 34% exploit odds Fix listed
  4. CVE-2025-33071

    Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.1 HIGH 23% exploit odds Fix listed
  5. CVE-2025-21309

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Microsoft Windows Server 2012

    8.1 HIGH 15% exploit odds Fix listed
  6. CVE-2025-27480

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.1 HIGH 13% exploit odds Fix listed
  7. CVE-2025-21218

    Windows Kerberos Denial of Service Vulnerability

    Microsoft Windows Server 2012

    7.5 HIGH 3% exploit odds Fix listed
  8. CVE-2025-26652

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  9. CVE-2025-27470

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  10. CVE-2025-27479

    Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  11. CVE-2025-21174

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  12. CVE-2025-27485

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  13. CVE-2025-27486

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  14. CVE-2025-26680

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  15. CVE-2025-33068

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  16. CVE-2025-54106

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.8 HIGH 1% exploit odds Fix listed
  17. CVE-2025-24045

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  18. CVE-2026-70082

    Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

    Other OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  19. CVE-2026-83635

    Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  20. CVE-2026-88123

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  21. CVE-2026-88125

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  22. CVE-2026-88129

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  23. CVE-2026-88130

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  24. CVE-2025-49735

    Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  25. CVE-2026-26154

    Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  26. CVE-2026-85321

    Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  27. CVE-2026-88122

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  28. CVE-2026-25172

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.0 HIGH 1% exploit odds Fix listed
  29. CVE-2026-84007

    Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1.0% exploit odds Fix listed
  30. CVE-2025-49688

    Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.8 HIGH 1.0% exploit odds Fix listed
  31. CVE-2026-69595

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 1.0% exploit odds Fix listed
  32. CVE-2026-78445

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 1.0% exploit odds Fix listed
  33. CVE-2026-69712

    Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.8 HIGH 0.9% exploit odds Fix listed
  34. CVE-2026-26111

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    8.0 HIGH 0.9% exploit odds Fix listed
  35. CVE-2026-88119

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.8% exploit odds Fix listed
  36. CVE-2026-88120

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.8% exploit odds Fix listed
  37. CVE-2026-88117

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.7% exploit odds Fix listed
  38. CVE-2026-69802

    Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

    Other Network gear Microsoft Windows Server 2012

    8.1 HIGH 0.6% exploit odds Fix listed
  39. CVE-2025-59258

    Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally.

    Microsoft Windows Server 2012

    6.2 MEDIUM 0.6% exploit odds Fix listed
  40. CVE-2026-42987

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.6% exploit odds Fix listed
  41. CVE-2026-33826

    Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

    Microsoft Windows Server 2012

    8.0 HIGH 0.5% exploit odds Fix listed
  42. CVE-2026-47288

    Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    7.1 HIGH 0.5% exploit odds Fix listed
  43. CVE-2025-55231

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2012

    7.5 HIGH 0.5% exploit odds Fix listed
  44. CVE-2026-70250

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.8 HIGH 0.5% exploit odds Fix listed
  45. CVE-2026-69675

    Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel Microsoft Windows Server 2012

    5.5 MEDIUM 0.5% exploit odds Fix listed
  46. CVE-2026-70201

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

    Memory safety OS & kernel Microsoft Windows Server 2012

    5.5 MEDIUM 0.5% exploit odds Fix listed
  47. CVE-2025-59188

    Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.

    Microsoft Windows Server 2012

    5.5 MEDIUM 0.4% exploit odds Fix listed
  48. CVE-2026-27912

    Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

    Microsoft Windows Server 2012

    8.0 HIGH 0.4% exploit odds Fix listed
  49. CVE-2025-58737

    Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

    Microsoft Windows Server 2012

    7.0 HIGH 0.4% exploit odds Fix listed
  50. CVE-2026-41095

    Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel Microsoft Windows Server 2012

    7.8 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Microsoft Windows Server 2012 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.