CVE-20XX-?
agent?

Microsoft Windows Server 2012 CVEs.

Published CVEs affecting Microsoft Windows Server 2012, ranked by exploit odds.

124 CVEs · updated 2026-11-13 10:05 UTC

  1. CVE-2025-21174

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  2. CVE-2025-27485

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  3. CVE-2025-27486

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  4. CVE-2024-38044

    DHCP Server Service Remote Code Execution Vulnerability

    Code execution OS & kernel Microsoft Windows Server 2012

    7.2 HIGH 2% exploit odds Fix listed
  5. CVE-2024-43512

    Windows Standards-Based Storage Management Service Denial of Service Vulnerability

    Denial of service OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 2% exploit odds Fix listed
  6. CVE-2025-26680

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  7. CVE-2023-29369

    Remote Procedure Call Runtime Denial of Service Vulnerability

    Microsoft Windows Server 2012

    6.5 MEDIUM 2% exploit odds Fix listed
  8. CVE-2025-33068

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  9. CVE-2013-3898

    Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka "Address Corruption Vulnerability."

    Microsoft Windows Server 2012

    7.9 HIGH 2% exploit odds No fix listed
  10. CVE-2022-26814

    Windows DNS Server Remote Code Execution Vulnerability

    Microsoft Windows Server 2012

    6.6 MEDIUM 2% exploit odds No fix listed
  11. CVE-2022-26817

    Windows DNS Server Remote Code Execution Vulnerability

    Microsoft Windows Server 2012

    6.6 MEDIUM 2% exploit odds No fix listed
  12. CVE-2024-49091

    Windows Domain Name Service Remote Code Execution Vulnerability

    Code execution OS & kernel Microsoft Windows Server 2012

    7.2 HIGH 2% exploit odds Fix listed
  13. CVE-2023-28247

    Windows Network File System Information Disclosure Vulnerability

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  14. CVE-2024-21427

    Windows Kerberos Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.5 HIGH 2% exploit odds Fix listed
  15. CVE-2025-54106

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.8 HIGH 1% exploit odds Fix listed
  16. CVE-2023-35317

    Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

    Microsoft Windows Server 2012

    7.8 HIGH 1% exploit odds Fix listed
  17. CVE-2023-35352

    Windows Remote Desktop Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  18. CVE-2025-24045

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    Other OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  19. CVE-2026-70082

    Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

    Other OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  20. CVE-2026-83635

    Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  21. CVE-2023-29355

    DHCP Server Service Information Disclosure Vulnerability

    Microsoft Windows Server 2012

    5.3 MEDIUM 1% exploit odds Fix listed
  22. CVE-2024-20688

    Secure Boot Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.1 HIGH 1% exploit odds Fix listed
  23. CVE-2024-20689

    Secure Boot Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.1 HIGH 1% exploit odds Fix listed
  24. CVE-2023-23400

    Windows DNS Server Remote Code Execution Vulnerability

    Microsoft Windows Server 2012

    7.2 HIGH 1% exploit odds Fix listed
  25. CVE-2026-88123

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  26. CVE-2026-88125

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  27. CVE-2026-88129

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  28. CVE-2026-88130

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  29. CVE-2023-32021

    Windows SMB Witness Service Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.1 HIGH 1% exploit odds Fix listed
  30. CVE-2025-49735

    Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  31. CVE-2024-49128

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  32. CVE-2026-26154

    Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

    Other OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  33. CVE-2024-49120

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Code execution OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 1% exploit odds Fix listed
  34. CVE-2026-85321

    Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 1% exploit odds Fix listed
  35. CVE-2026-88122

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1% exploit odds Fix listed
  36. CVE-2024-30062

    Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability

    Memory safety OS & kernel Microsoft Windows Server 2012

    7.8 HIGH 1% exploit odds Fix listed
  37. CVE-2026-25172

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.0 HIGH 1% exploit odds Fix listed
  38. CVE-2026-84007

    Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    6.5 MEDIUM 1.0% exploit odds Fix listed
  39. CVE-2025-49688

    Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.8 HIGH 1.0% exploit odds Fix listed
  40. CVE-2026-69595

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 1.0% exploit odds Fix listed
  41. CVE-2026-78445

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 1.0% exploit odds Fix listed
  42. CVE-2026-69712

    Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.8 HIGH 0.9% exploit odds Fix listed
  43. CVE-2026-26111

    Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.0 HIGH 0.9% exploit odds Fix listed
  44. CVE-2020-16980

    <p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.</p> <p>To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application.</p> <p>The security update addresses the vulnerability by ensuring the Windows iSCSI Target Service properly handles file operations.</p>

    Microsoft Windows Server 2012

    7.8 HIGH 0.9% exploit odds Fix listed
  45. CVE-2024-49129

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

    Denial of service OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 0.8% exploit odds Fix listed
  46. CVE-2023-32022

    Windows Server Service Security Feature Bypass Vulnerability

    Microsoft Windows Server 2012

    7.6 HIGH 0.8% exploit odds Fix listed
  47. CVE-2026-88119

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.8% exploit odds Fix listed
  48. CVE-2026-88120

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2012

    8.1 HIGH 0.8% exploit odds Fix listed
  49. CVE-2020-1356

    An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.

    Microsoft Windows Server 2012

    7.8 HIGH 0.8% exploit odds Fix listed
  50. CVE-2023-35331

    Windows Local Security Authority (LSA) Denial of Service Vulnerability

    Microsoft Windows Server 2012

    6.5 MEDIUM 0.7% exploit odds Fix listed

All CVEs affecting Microsoft Windows Server 2012 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.