[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxILpWX5wY_GUFNN1rwiCrz9_SgLiE3gCKxHM7mCOsfo":3,"g5a-family:microsoft\u002Fwindows_server_2012":458,"g5a-ex:microsoft\u002Fwindows_server_2012@*":459},{"success":4,"data":5},true,{"product":6,"versions":33,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":99,"seoMetadata":436,"meta":455},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":32},"microsoft","windows_server_2012",7,3842,198,"2025-10-14",[14,18,20,22,24,26,28],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.24116",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.24768",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.24919",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.24975",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.25031",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9200.25073",{"version":29,"cve_count":30,"kev_count":31,"has_kev":4},"r2",3667,187,"Windows Server 2012 by Microsoft is a technology product with 7 tracked versions and 3842 known security vulnerabilities including 198 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[34,35,36,37,38,39,40],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":31,"has_kev":4},[42,50,55,62,68,73,78,85,90,95],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":4,"epssScore":49},"CVE-2015-1635","HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka \"HTTP.sys Remote Code Execution Vulnerability.\"","2015-04-14",9.8,"v3.1","Critical",0.99999,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":4,"epssScore":54},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20",0.99998,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":47,"severity":60,"isKev":4,"epssScore":61},"CVE-2017-0147","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka \"Windows SMB Information Disclosure Vulnerability.\"","2017-03-17",7.5,"High",0.99693,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":47,"severity":60,"isKev":4,"epssScore":67},"CVE-2017-0199","Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office\u002FWordPad Remote Code Execution Vulnerability w\u002FWindows API.\"","2017-04-12",7.8,0.99497,{"cveId":69,"description":70,"publishedDate":58,"cvssScore":71,"cvssVersion":47,"severity":60,"isKev":4,"epssScore":72},"CVE-2017-0148","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.",8.1,0.99356,{"cveId":74,"description":75,"publishedDate":58,"cvssScore":76,"cvssVersion":47,"severity":60,"isKev":4,"epssScore":77},"CVE-2017-0144","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",8.8,0.9923,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":83,"severity":48,"isKev":17,"epssScore":84},"CVE-2015-0014","Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows Telnet Service Buffer Overflow Vulnerability.\"","2015-01-13",10,"v2",0.96893,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":82,"cvssVersion":83,"severity":48,"isKev":17,"epssScore":89},"CVE-2014-6321","Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka \"Microsoft Schannel Remote Code Execution Vulnerability.\"","2014-11-11",0.95988,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":4,"epssScore":94},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,{"cveId":96,"description":97,"publishedDate":88,"cvssScore":76,"cvssVersion":47,"severity":60,"isKev":4,"epssScore":98},"CVE-2014-6332","OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka \"Windows OLE Automation Array Remote Code Execution Vulnerability.\"",0.94918,[100,108,115,124,131,139,148,154,160,168,174,180,187,193,199,205,214,218,224,230,236,242,248,255,263,271,279,287,293,300,307,313,319,325,332,338,344,349,355,363,368,377,386,393,398,404,409,417,425,431],{"cveId":101,"description":102,"publishedDate":103,"cvssScore":66,"severity":60,"isKev":4,"epssScore":104,"cisaVulnName":105,"cisaDateAdded":103,"cisaShortDescription":106,"cisaRequiredAction":107},"CVE-2026-85880","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","2026-09-08",0.00387,"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":109,"description":110,"publishedDate":111,"cvssScore":66,"severity":60,"isKev":4,"epssScore":112,"cisaVulnName":113,"cisaDateAdded":111,"cisaShortDescription":114,"cisaRequiredAction":107},"CVE-2026-56155","Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.","2026-07-14",0.00346,"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability","Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":116,"description":117,"publishedDate":118,"cvssScore":66,"severity":60,"isKev":4,"epssScore":119,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"CVE-2023-36424","Windows Common Log File System Driver Elevation of Privilege Vulnerability","2023-11-14",0.12087,"Microsoft Windows Out-of-Bounds Read Vulnerability","2026-04-13","Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":125,"description":126,"publishedDate":12,"cvssScore":46,"severity":48,"isKev":4,"epssScore":127,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":123},"CVE-2025-59287","Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.",0.9998,"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","2025-10-24","Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.",{"cveId":132,"description":133,"publishedDate":134,"cvssScore":76,"severity":60,"isKev":4,"epssScore":135,"cisaVulnName":136,"cisaDateAdded":137,"cisaShortDescription":138,"cisaRequiredAction":123},"CVE-2025-33073","Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.","2025-06-10",0.82699,"Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.",{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"severity":144,"isKev":4,"epssScore":145,"cisaVulnName":146,"cisaDateAdded":12,"cisaShortDescription":147,"cisaRequiredAction":123},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,"Medium",0.04927,"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":149,"description":150,"publishedDate":12,"cvssScore":66,"severity":60,"isKev":4,"epssScore":151,"cisaVulnName":152,"cisaDateAdded":12,"cisaShortDescription":153,"cisaRequiredAction":123},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",0.06369,"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.",{"cveId":155,"description":156,"publishedDate":12,"cvssScore":66,"severity":60,"isKev":4,"epssScore":157,"cisaVulnName":158,"cisaDateAdded":12,"cisaShortDescription":159,"cisaRequiredAction":123},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"cveId":161,"description":162,"publishedDate":163,"cvssScore":76,"severity":60,"isKev":4,"epssScore":164,"cisaVulnName":165,"cisaDateAdded":166,"cisaShortDescription":167,"cisaRequiredAction":123},"CVE-2013-3918","The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted web page that is accessed by Internet Explorer, as exploited in the wild in November 2013, aka \"InformationCardSigninHelper Vulnerability.\"","2013-11-12",0.73693,"Microsoft Windows Out-of-Bounds Write Vulnerability","2025-10-06","Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":169,"description":117,"publishedDate":170,"cvssScore":66,"severity":60,"isKev":4,"epssScore":171,"cisaVulnName":172,"cisaDateAdded":166,"cisaShortDescription":173,"cisaRequiredAction":123},"CVE-2021-43226","2021-12-15",0.03275,"Microsoft Windows Privilege Escalation Vulnerability","Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.",{"cveId":175,"description":176,"publishedDate":134,"cvssScore":76,"severity":60,"isKev":4,"epssScore":177,"cisaVulnName":178,"cisaDateAdded":134,"cisaShortDescription":179,"cisaRequiredAction":123},"CVE-2025-33053","External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.",0.87015,"Microsoft Windows External Control of File Name or Path Vulnerability","Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.",{"cveId":181,"description":182,"publishedDate":183,"cvssScore":59,"severity":60,"isKev":4,"epssScore":184,"cisaVulnName":185,"cisaDateAdded":183,"cisaShortDescription":186,"cisaRequiredAction":123},"CVE-2025-30397","Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.","2025-05-13",0.27263,"Microsoft Windows Scripting Engine Type Confusion Vulnerability","Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.",{"cveId":188,"description":189,"publishedDate":183,"cvssScore":66,"severity":60,"isKev":4,"epssScore":190,"cisaVulnName":191,"cisaDateAdded":183,"cisaShortDescription":192,"cisaRequiredAction":123},"CVE-2025-32701","Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.01416,"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":194,"description":195,"publishedDate":183,"cvssScore":66,"severity":60,"isKev":4,"epssScore":196,"cisaVulnName":197,"cisaDateAdded":183,"cisaShortDescription":198,"cisaRequiredAction":123},"CVE-2025-32706","Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.02333,"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":200,"description":201,"publishedDate":183,"cvssScore":66,"severity":60,"isKev":4,"epssScore":202,"cisaVulnName":203,"cisaDateAdded":183,"cisaShortDescription":204,"cisaRequiredAction":123},"CVE-2025-32709","Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",0.01818,"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.",{"cveId":206,"description":207,"publishedDate":208,"cvssScore":209,"severity":144,"isKev":4,"epssScore":210,"cisaVulnName":211,"cisaDateAdded":212,"cisaShortDescription":213,"cisaRequiredAction":123},"CVE-2025-24054","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11",6.5,0.6227,"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.",{"cveId":215,"description":189,"publishedDate":216,"cvssScore":66,"severity":60,"isKev":4,"epssScore":217,"cisaVulnName":191,"cisaDateAdded":216,"cisaShortDescription":192,"cisaRequiredAction":123},"CVE-2025-29824","2025-04-08",0.19254,{"cveId":219,"description":220,"publishedDate":208,"cvssScore":143,"severity":144,"isKev":4,"epssScore":221,"cisaVulnName":222,"cisaDateAdded":208,"cisaShortDescription":223,"cisaRequiredAction":123},"CVE-2025-24984","Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.",0.01994,"Microsoft Windows NTFS Information Disclosure Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.",{"cveId":225,"description":226,"publishedDate":208,"cvssScore":9,"severity":60,"isKev":4,"epssScore":227,"cisaVulnName":228,"cisaDateAdded":208,"cisaShortDescription":229,"cisaRequiredAction":123},"CVE-2025-26633","Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.",0.30391,"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.",{"cveId":231,"description":232,"publishedDate":208,"cvssScore":66,"severity":60,"isKev":4,"epssScore":233,"cisaVulnName":234,"cisaDateAdded":208,"cisaShortDescription":235,"cisaRequiredAction":123},"CVE-2025-24993","Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.",0.02216,"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":237,"description":238,"publishedDate":208,"cvssScore":66,"severity":60,"isKev":4,"epssScore":239,"cisaVulnName":240,"cisaDateAdded":208,"cisaShortDescription":241,"cisaRequiredAction":123},"CVE-2025-24985","Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.",0.0389,"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":243,"description":244,"publishedDate":208,"cvssScore":9,"severity":60,"isKev":4,"epssScore":245,"cisaVulnName":246,"cisaDateAdded":208,"cisaShortDescription":247,"cisaRequiredAction":123},"CVE-2025-24983","Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.",0.0187,"Microsoft Windows Win32k Use-After-Free Vulnerability","Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":249,"description":250,"publishedDate":208,"cvssScore":251,"severity":144,"isKev":4,"epssScore":252,"cisaVulnName":253,"cisaDateAdded":208,"cisaShortDescription":254,"cisaRequiredAction":123},"CVE-2025-24991","Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.",5.5,0.02018,"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.",{"cveId":256,"description":257,"publishedDate":258,"cvssScore":66,"severity":60,"isKev":4,"epssScore":259,"cisaVulnName":260,"cisaDateAdded":261,"cisaShortDescription":262,"cisaRequiredAction":123},"CVE-2018-8639","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.","2018-12-12",0.22179,"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","2025-03-03","Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.",{"cveId":264,"description":265,"publishedDate":266,"cvssScore":66,"severity":60,"isKev":4,"epssScore":267,"cisaVulnName":268,"cisaDateAdded":266,"cisaShortDescription":269,"cisaRequiredAction":270},"CVE-2025-21418","Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","2025-02-11",0.02132,"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":272,"description":273,"publishedDate":274,"cvssScore":59,"severity":60,"isKev":4,"epssScore":275,"cisaVulnName":276,"cisaDateAdded":277,"cisaShortDescription":278,"cisaRequiredAction":270},"CVE-2024-29059",".NET Framework Information Disclosure Vulnerability","2024-03-23",0.98624,"Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.",{"cveId":280,"description":281,"publishedDate":282,"cvssScore":66,"severity":60,"isKev":4,"epssScore":283,"cisaVulnName":284,"cisaDateAdded":285,"cisaShortDescription":286,"cisaRequiredAction":270},"CVE-2024-35250","Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","2024-06-11",0.25222,"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.",{"cveId":288,"description":117,"publishedDate":289,"cvssScore":66,"severity":60,"isKev":4,"epssScore":290,"cisaVulnName":197,"cisaDateAdded":291,"cisaShortDescription":292,"cisaRequiredAction":270},"CVE-2024-49138","2024-12-12",0.26215,"2024-12-10","Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",{"cveId":294,"description":295,"publishedDate":296,"cvssScore":209,"severity":144,"isKev":4,"epssScore":297,"cisaVulnName":298,"cisaDateAdded":296,"cisaShortDescription":299,"cisaRequiredAction":270},"CVE-2024-43451","NTLM Hash Disclosure Spoofing Vulnerability","2024-11-12",0.84266,"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.",{"cveId":301,"description":302,"publishedDate":303,"cvssScore":71,"severity":60,"isKev":4,"epssScore":304,"cisaVulnName":305,"cisaDateAdded":303,"cisaShortDescription":306,"cisaRequiredAction":270},"CVE-2024-43573","Windows MSHTML Platform Spoofing Vulnerability","2024-10-08",0.46109,"Microsoft Windows MSHTML Platform Spoofing Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.",{"cveId":308,"description":309,"publishedDate":303,"cvssScore":66,"severity":60,"isKev":4,"epssScore":310,"cisaVulnName":311,"cisaDateAdded":303,"cisaShortDescription":312,"cisaRequiredAction":270},"CVE-2024-43572","Microsoft Management Console Remote Code Execution Vulnerability",0.66695,"Microsoft Windows Management Console Remote Code Execution Vulnerability","Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.",{"cveId":314,"description":302,"publishedDate":315,"cvssScore":76,"severity":60,"isKev":4,"epssScore":316,"cisaVulnName":305,"cisaDateAdded":317,"cisaShortDescription":318,"cisaRequiredAction":270},"CVE-2024-43461","2024-09-10",0.54486,"2024-09-16","Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.",{"cveId":320,"description":321,"publishedDate":315,"cvssScore":66,"severity":60,"isKev":4,"epssScore":322,"cisaVulnName":323,"cisaDateAdded":315,"cisaShortDescription":324,"cisaRequiredAction":270},"CVE-2024-38014","Windows Installer Elevation of Privilege Vulnerability",0.06263,"Microsoft Windows Installer Improper Privilege Management Vulnerability","Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":326,"description":327,"publishedDate":315,"cvssScore":328,"severity":144,"isKev":4,"epssScore":329,"cisaVulnName":330,"cisaDateAdded":315,"cisaShortDescription":331,"cisaRequiredAction":270},"CVE-2024-38217","Windows Mark of the Web Security Feature Bypass Vulnerability",5.4,0.10026,"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.",{"cveId":333,"description":327,"publishedDate":334,"cvssScore":209,"severity":144,"isKev":4,"epssScore":335,"cisaVulnName":336,"cisaDateAdded":334,"cisaShortDescription":337,"cisaRequiredAction":270},"CVE-2024-38213","2024-08-13",0.13626,"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.",{"cveId":339,"description":340,"publishedDate":334,"cvssScore":59,"severity":60,"isKev":4,"epssScore":341,"cisaVulnName":342,"cisaDateAdded":334,"cisaShortDescription":343,"cisaRequiredAction":270},"CVE-2024-38178","Scripting Engine Memory Corruption Vulnerability",0.4138,"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.",{"cveId":345,"description":265,"publishedDate":334,"cvssScore":66,"severity":60,"isKev":4,"epssScore":346,"cisaVulnName":347,"cisaDateAdded":334,"cisaShortDescription":348,"cisaRequiredAction":270},"CVE-2024-38193",0.28739,"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":350,"description":351,"publishedDate":334,"cvssScore":66,"severity":60,"isKev":4,"epssScore":352,"cisaVulnName":353,"cisaDateAdded":334,"cisaShortDescription":354,"cisaRequiredAction":270},"CVE-2024-38107","Windows Power Dependency Coordinator Elevation of Privilege Vulnerability",0.01635,"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.",{"cveId":356,"description":357,"publishedDate":358,"cvssScore":76,"severity":60,"isKev":4,"epssScore":359,"cisaVulnName":360,"cisaDateAdded":361,"cisaShortDescription":362,"cisaRequiredAction":270},"CVE-2018-0824","A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","2018-05-09",0.73037,"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","2024-08-05","Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.",{"cveId":364,"description":302,"publishedDate":365,"cvssScore":59,"severity":60,"isKev":4,"epssScore":366,"cisaVulnName":305,"cisaDateAdded":365,"cisaShortDescription":367,"cisaRequiredAction":270},"CVE-2024-38112","2024-07-09",0.84225,"Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.",{"cveId":369,"description":370,"publishedDate":371,"cvssScore":66,"severity":60,"isKev":4,"epssScore":372,"cisaVulnName":373,"cisaDateAdded":374,"cisaShortDescription":375,"cisaRequiredAction":376},"CVE-2024-26169","Windows Error Reporting Service Elevation of Privilege Vulnerability","2024-03-12",0.03981,"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","2024-06-13","Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":378,"description":379,"publishedDate":380,"cvssScore":66,"severity":60,"isKev":4,"epssScore":381,"cisaVulnName":382,"cisaDateAdded":383,"cisaShortDescription":384,"cisaRequiredAction":385},"CVE-2022-38028","Windows Print Spooler Elevation of Privilege Vulnerability","2022-10-11",0.14949,"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","2024-04-23","Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.  ",{"cveId":387,"description":327,"publishedDate":388,"cvssScore":328,"severity":144,"isKev":4,"epssScore":389,"cisaVulnName":390,"cisaDateAdded":391,"cisaShortDescription":392,"cisaRequiredAction":270},"CVE-2023-36584","2023-10-10",0.03251,"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2023-11-16","Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.",{"cveId":394,"description":395,"publishedDate":118,"cvssScore":76,"severity":60,"isKev":4,"epssScore":396,"cisaVulnName":336,"cisaDateAdded":118,"cisaShortDescription":397,"cisaRequiredAction":270},"CVE-2023-36025","Windows SmartScreen Security Feature Bypass Vulnerability",0.88085,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.",{"cveId":399,"description":400,"publishedDate":118,"cvssScore":66,"severity":60,"isKev":4,"epssScore":401,"cisaVulnName":402,"cisaDateAdded":118,"cisaShortDescription":403,"cisaRequiredAction":270},"CVE-2023-36036","Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability",0.1667,"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":405,"description":406,"publishedDate":388,"cvssScore":209,"severity":144,"isKev":4,"epssScore":407,"cisaVulnName":406,"cisaDateAdded":388,"cisaShortDescription":408,"cisaRequiredAction":270},"CVE-2023-36563","Microsoft WordPad Information Disclosure Vulnerability",0.20318,"Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.",{"cveId":410,"description":411,"publishedDate":412,"cvssScore":9,"severity":60,"isKev":4,"epssScore":413,"cisaVulnName":414,"cisaDateAdded":415,"cisaShortDescription":416,"cisaRequiredAction":270},"CVE-2023-28229","Windows CNG Key Isolation Service Elevation of Privilege Vulnerability","2023-04-11",0.01671,"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","2023-10-04","Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.",{"cveId":418,"description":419,"publishedDate":420,"cvssScore":59,"severity":60,"isKev":4,"epssScore":421,"cisaVulnName":422,"cisaDateAdded":423,"cisaShortDescription":424,"cisaRequiredAction":270},"CVE-2023-36884","Windows Search Remote Code Execution Vulnerability","2023-07-11",0.99439,"Microsoft Windows Search Remote Code Execution Vulnerability","2023-07-17","Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.",{"cveId":426,"description":427,"publishedDate":420,"cvssScore":66,"severity":60,"isKev":4,"epssScore":428,"cisaVulnName":429,"cisaDateAdded":420,"cisaShortDescription":430,"cisaRequiredAction":376},"CVE-2023-32046","Windows MSHTML Platform Elevation of Privilege Vulnerability",0.09969,"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":432,"description":370,"publishedDate":420,"cvssScore":66,"severity":60,"isKev":4,"epssScore":433,"cisaVulnName":434,"cisaDateAdded":420,"cisaShortDescription":435,"cisaRequiredAction":376},"CVE-2023-36874",0.42564,"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.",{"title":437,"metaDescription":438,"keywords":439,"structuredData":440},"Windows Server 2012 by Microsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Windows Server 2012 by Microsoft covering 7 versions with 3842 tracked vulnerabilities including 1 critical and 40 high-severity issues and 198 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows Server 2012 vulnerabilities, Windows Server 2012 security, Windows Server 2012 CVE, Microsoft Windows Server 2012, Windows Server 2012 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows Server 2012 KEV, Windows Server 2012 exploited vulnerabilities",{"@context":441,"@type":442,"name":443,"description":438,"url":444,"manufacturer":445,"applicationCategory":449,"softwareVersion":450,"mainEntity":451},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows Server 2012","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_server_2012",{"@type":446,"name":447,"url":448},"Organization","Microsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fmicrosoft","Security Software","7 versions tracked",{"@type":452,"name":453,"description":454,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows Server 2012 Security Vulnerabilities","Security vulnerabilities affecting Windows Server 2012 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":456,"apiVersion":457},"2026-10-28T14:04:35.400Z","3.0",[],{"rows":460,"total":581,"capped":4,"failed":16},[461,465,469,473,477,481,485,489,493,497,501,505,509,513,517,521,525,529,533,537,541,545,549,553,557,561,565,569,573,577],{"cveId":101,"name":105,"severity":60,"cvss":66,"added":103,"epss":104,"published":462,"ranges":463,"checked":4,"hits":464,"covers":17},"2026-09-08T18:21:14.087",[29],[],{"cveId":109,"name":113,"severity":60,"cvss":66,"added":111,"epss":112,"published":466,"ranges":467,"checked":4,"hits":468,"covers":17},"2026-07-14T17:17:09.763",[29],[],{"cveId":116,"name":120,"severity":60,"cvss":66,"added":121,"epss":119,"published":470,"ranges":471,"checked":4,"hits":472,"covers":17},"2023-11-14T18:15:45.99",[29],[],{"cveId":125,"name":128,"severity":48,"cvss":46,"added":129,"epss":127,"published":474,"ranges":475,"checked":4,"hits":476,"covers":17},"2025-10-14T17:16:11.67",[29],[],{"cveId":132,"name":136,"severity":60,"cvss":76,"added":137,"epss":135,"published":478,"ranges":479,"checked":4,"hits":480,"covers":17},"2025-06-10T17:23:02.967",[29],[],{"cveId":140,"name":146,"severity":144,"cvss":143,"added":12,"epss":145,"published":482,"ranges":483,"checked":4,"hits":484,"covers":17},"2025-06-05T14:15:32.263",[29],[],{"cveId":149,"name":152,"severity":60,"cvss":66,"added":12,"epss":151,"published":486,"ranges":487,"checked":4,"hits":488,"covers":17},"2025-10-14T17:15:39.193",[29],[],{"cveId":155,"name":158,"severity":60,"cvss":66,"added":12,"epss":157,"published":490,"ranges":491,"checked":4,"hits":492,"covers":17},"2025-10-14T17:16:04.173",[29],[],{"cveId":161,"name":165,"severity":60,"cvss":76,"added":166,"epss":164,"published":494,"ranges":495,"checked":4,"hits":496,"covers":17},"2013-11-12T14:35:11.713",[29],[],{"cveId":169,"name":172,"severity":60,"cvss":66,"added":166,"epss":171,"published":498,"ranges":499,"checked":4,"hits":500,"covers":17},"2021-12-15T15:15:09.737",[29],[],{"cveId":175,"name":178,"severity":60,"cvss":76,"added":134,"epss":177,"published":502,"ranges":503,"checked":4,"hits":504,"covers":17},"2025-06-10T17:22:18.853",[29],[],{"cveId":181,"name":185,"severity":60,"cvss":59,"added":183,"epss":184,"published":506,"ranges":507,"checked":4,"hits":508,"covers":17},"2025-05-13T17:16:02.37",[29],[],{"cveId":188,"name":191,"severity":60,"cvss":66,"added":183,"epss":190,"published":510,"ranges":511,"checked":4,"hits":512,"covers":17},"2025-05-13T17:16:02.71",[29],[],{"cveId":194,"name":197,"severity":60,"cvss":66,"added":183,"epss":196,"published":514,"ranges":515,"checked":4,"hits":516,"covers":17},"2025-05-13T17:16:03.607",[29],[],{"cveId":200,"name":203,"severity":60,"cvss":66,"added":183,"epss":202,"published":518,"ranges":519,"checked":4,"hits":520,"covers":17},"2025-05-13T17:16:04.02",[29],[],{"cveId":206,"name":211,"severity":144,"cvss":209,"added":212,"epss":210,"published":522,"ranges":523,"checked":4,"hits":524,"covers":17},"2025-03-11T17:16:27.66",[29],[],{"cveId":215,"name":191,"severity":60,"cvss":66,"added":216,"epss":217,"published":526,"ranges":527,"checked":4,"hits":528,"covers":17},"2025-04-08T18:16:08.34",[29],[],{"cveId":219,"name":222,"severity":144,"cvss":143,"added":208,"epss":221,"published":530,"ranges":531,"checked":4,"hits":532,"covers":17},"2025-03-11T17:16:34.09",[29],[],{"cveId":225,"name":228,"severity":60,"cvss":9,"added":208,"epss":227,"published":534,"ranges":535,"checked":4,"hits":536,"covers":17},"2025-03-11T17:16:43.39",[29],[],{"cveId":231,"name":234,"severity":60,"cvss":66,"added":208,"epss":233,"published":538,"ranges":539,"checked":4,"hits":540,"covers":17},"2025-03-11T17:16:35.797",[29],[],{"cveId":237,"name":240,"severity":60,"cvss":66,"added":208,"epss":239,"published":542,"ranges":543,"checked":4,"hits":544,"covers":17},"2025-03-11T17:16:34.303",[29],[],{"cveId":243,"name":246,"severity":60,"cvss":9,"added":208,"epss":245,"published":546,"ranges":547,"checked":4,"hits":548,"covers":17},"2025-03-11T17:16:33.89",[29],[],{"cveId":249,"name":253,"severity":144,"cvss":251,"added":208,"epss":252,"published":550,"ranges":551,"checked":4,"hits":552,"covers":17},"2025-03-11T17:16:35.297",[29],[],{"cveId":256,"name":260,"severity":60,"cvss":66,"added":261,"epss":259,"published":554,"ranges":555,"checked":4,"hits":556,"covers":17},"2018-12-12T00:29:01.84",[29],[],{"cveId":264,"name":268,"severity":60,"cvss":66,"added":266,"epss":267,"published":558,"ranges":559,"checked":4,"hits":560,"covers":17},"2025-02-11T18:15:40.023",[29],[],{"cveId":272,"name":276,"severity":60,"cvss":59,"added":277,"epss":275,"published":562,"ranges":563,"checked":4,"hits":564,"covers":17},"2024-03-23T00:15:09.15",[],[],{"cveId":280,"name":284,"severity":60,"cvss":66,"added":285,"epss":283,"published":566,"ranges":567,"checked":4,"hits":568,"covers":17},"2024-06-11T17:16:02.65",[29],[],{"cveId":288,"name":197,"severity":60,"cvss":66,"added":291,"epss":290,"published":570,"ranges":571,"checked":4,"hits":572,"covers":17},"2024-12-12T02:04:40.307",[29],[],{"cveId":294,"name":298,"severity":144,"cvss":209,"added":296,"epss":297,"published":574,"ranges":575,"checked":4,"hits":576,"covers":17},"2024-11-12T18:15:22.483",[29],[],{"cveId":301,"name":305,"severity":60,"cvss":71,"added":303,"epss":304,"published":578,"ranges":579,"checked":4,"hits":580,"covers":17},"2024-10-08T18:15:24.817",[29],[],50]