Known vulnerabilities in Windows Server 2012 R2 - page 7

Vendor: Microsoft
Version: 2012 R2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 2848
Public exploits: 274
Known exploited (KEV): 135
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2012 R2 Windows Server 2012 R2 is affected by 2848 vulnerabilities: 47 critical, 752 high, 626 medium, 1423 low Critical High Medium Low

Vulnerabilities (2848)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86386 - Improper input validation
CVE-2024-21372
CWE-20 High
No
No
- 13.02.2024 SB2024021333
#VU85243 - Security Features
CVE-2024-20674
CWE-254 Medium
No
No
- 10.01.2024 SB2024011001
#VU85242 - Security Features
CVE-2024-20652
CWE-254 Medium
No
No
- 09.01.2024 SB2024010999
#VU85229 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-20691
CWE-362 Low
No
No
- 09.01.2024 SB2024010990
#VU85228 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-21320
CWE-451 Medium
No
No
- 09.01.2024 SB2024010990
#VU85220 - Permissions, Privileges, and Access Controls
CVE-2024-20658
CWE-264 Low
No
No
- 09.01.2024 SB2024010980
#VU85197 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20662
CWE-200 Low
No
No
- 09.01.2024 SB2024010960
#VU85196 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21313
CWE-200 Medium
No
No
- 09.01.2024 SB2024010959
#VU85195 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-20657
CWE-362 Low
No
No
- 09.01.2024 SB2024010958
#VU85193 - Improper input validation
CVE-2024-20654
CWE-20 Medium
No
No
- 09.01.2024 SB2024010956
#VU85192 - Improper input validation
CVE-2024-20661
CWE-20 Medium
No
No
- 09.01.2024 SB2024010955
#VU85191 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20664
CWE-200 Medium
No
No
- 09.01.2024 SB2024010955
#VU85190 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21314
CWE-200 Medium
No
No
- 09.01.2024 SB2024010955
#VU85189 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20660
CWE-200 Medium
No
No
- 09.01.2024 SB2024010955
#VU85187 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-21307
CWE-362 Medium
No
No
- 09.01.2024 SB2024010953
#VU85186 - Permissions, Privileges, and Access Controls
CVE-2024-20653
CWE-264 Low
No
No
- 09.01.2024 SB2024010943
#VU85182 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-20655
CWE-362 Low
No
No
- 09.01.2024 SB2024010940
#VU85181 - Improper input validation
CVE-2024-20682
CWE-20 Medium
No
No
- 09.01.2024 SB2024010939
#VU85180 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21311
CWE-200 Low
No
No
- 09.01.2024 SB2024010939
#VU85179 - Permissions, Privileges, and Access Controls
CVE-2024-20683
CWE-264 Low
No
No
- 09.01.2024 SB2024010938


Showing elements 121 - 140 out of 2848