Microsoft Windows Server 2012 R2 vulnerabilities, page 2
4,102 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2012 R2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97822microsoftwindows_10_1607+28
EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97821microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97820microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97819microsoftwindows_10_1607+28EPSS score0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97817microsoftwindows_10_1607+28EPSS score0.95%
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97815microsoftwindows_10_1607+28EPSS score0.67%
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.CVE-2026-97814microsoftwindows_10_1607+28EPSS score0.97%
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.CVE-2026-97805microsoftwindows_10_1607+28EPSS score0.94%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.CVE-2026-97789microsoftwindows 10 version 1607+19EPSS score0.56%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-97788microsoftmicrosoft .net framework 3.5+37EPSS score0.68%
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.CVE-2026-96953microsoftwindows_10_1607+28EPSS score0.24%
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.CVE-2026-96951microsoftoutlook+30KEVEPSS score1.51%
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96950microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96949microsoftwindows_10_1607+28EPSS score0.19%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96948microsoftwindows_10_1607+28EPSS score0.46%
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.CVE-2026-96947microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96946microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96938microsoftwindows_10_1607+28EPSS score0.33%
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96935microsoftwindows_10_1607+28EPSS score0.35%
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96934microsoftwindows_10_1607+14EPSS score0.71%
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.