Known vulnerabilities in Windows Server 2012 R2

Vendor: Microsoft
Software: Windows Server
Version: 2012 R2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 2848
Public exploits: 274
Known exploited (KEV): 135
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2012 R2 Windows Server 2012 R2 is affected by 2848 vulnerabilities: 47 critical, 752 high, 626 medium, 1423 low Critical High Medium Low

Vulnerabilities (2848)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88429 - Resource exhaustion
CVE-2024-26215		 CWE-400 Medium
No
No
 - 10.04.2024 SB2024041073
#VU88428 - Heap-based Buffer Overflow
CVE-2024-26229		 CWE-122 Low
Public exploit available
No
 - 10.04.2024 SB2024041072
#VU88427 - Authorization Bypass Through User-Controlled Key
CVE-2024-20665		 CWE-639 Low
No
No
 - 10.04.2024 SB2024041071
#VU88422 - Heap-based Buffer Overflow
CVE-2024-26214		 CWE-122 High
No
No
 - 10.04.2024 SB2024041065
#VU88421 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-26158		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041064
#VU88419 - Improper input validation
CVE-2024-26253		 CWE-20 Low
No
No
 - 10.04.2024 SB2024041062
#VU88418 - Untrusted Pointer Dereference
CVE-2024-26252		 CWE-822 Low
No
No
 - 10.04.2024 SB2024041062
#VU88417 - Protection Mechanism Failure
CVE-2024-20669		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88416 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-29062		 CWE-367 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88415 - Improper input validation
CVE-2024-26189		 CWE-20 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88414 - Stack-based buffer overflow
CVE-2024-28898		 CWE-121 Low
No
No
 - 10.04.2024 SB2024041061
#VU88413 - Protection Mechanism Failure
CVE-2024-28919		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88412 - Stack-based buffer overflow
CVE-2024-20688		 CWE-121 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88411 - Protection Mechanism Failure
CVE-2024-28921		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88410 - Protection Mechanism Failure
CVE-2024-26250		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88409 - Stack-based buffer overflow
CVE-2024-28924		 CWE-121 Low
No
No
 - 10.04.2024 SB2024041061
SB2025061025
#VU88408 - Out-of-bounds read
CVE-2024-26175		 CWE-125 Low
No
No
 - 10.04.2024 SB2024041061
#VU88405 - Integer overflow
CVE-2024-26171		 CWE-190 Low
No
No
 - 10.04.2024 SB2024041061
#VU88404 - Heap-based Buffer Overflow
CVE-2024-26168		 CWE-122 Low
No
No
 - 10.04.2024 SB2024041061
#VU88391 - Improper Access Control
CVE-2024-28922		 CWE-284 Low
No
No
 - 10.04.2024 SB2024041061


Showing elements 1 - 20 out of 2848