windows_server_2012 vulnerabilities
CVEs whose affected-version data names the windows_server_2012 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1646 CVEsRSS
CVE-2021-33783Medium· 6.5Windows SMB Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
CVE-2021-33782Medium· 5.5Windows Authenticode Spoofing Vulnerability
Windows Authenticode Spoofing Vulnerability
CVE-2021-33780High· 8.8Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-33773High· 7.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2021-33771High· 7.8CISA KEV0dayWindows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-33765Medium· 6.2Windows Installer Spoofing Vulnerability
Windows Installer Spoofing Vulnerability
CVE-2021-33764Medium· 5.9Windows Key Distribution Center Information Disclosure Vulnerability
Windows Key Distribution Center Information Disclosure Vulnerability
CVE-2021-33763Medium· 5.5Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-33761High· 7.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2021-33757Medium· 5.3Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
CVE-2021-33756High· 8.8Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33754High· 8.0Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-33752High· 8.8Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33750High· 8.8Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33749High· 8.8Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33746High· 8.0Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-33745Medium· 6.5Windows DNS Server Denial of Service Vulnerability
Windows DNS Server Denial of Service Vulnerability
CVE-2021-31979High· 7.8CISA KEV0dayPoCWindows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31183High· 7.5Windows TCP/IP Driver Denial of Service Vulnerability
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-34527High· 8.8CISA KEVPoCA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges…
CVE-2021-1675High· 7.8CISA KEVPoCWindows Print Spooler Remote Code Execution Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2020-1154High· 7.8An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated conte…
CVE-2020-1153High· 7.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the…
CVE-2020-1149High· 7.0An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could ex…
CVE-2020-1143High· 7.0An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. …
CVE-2020-1141Medium· 5.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclo…
CVE-2020-1136High· 7.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new acc…
CVE-2020-1116Medium· 5.5An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory
An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to fur…
CVE-2020-1114High· 7.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then …
CVE-2020-1113Medium· 5.3A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code …