microsoft windows server 2012 vulnerabilities, newest first, page 40
Filter
- 7.8CVE-2025-26679EPSS 0.6%
Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-26676EPSS 1.7%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-26673EPSS 2.7%
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 6.5CVE-2025-26672EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 8.1CVE-2025-26671EPSS 1.2%
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2025-26670EPSS 11%
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-26669EPSS 1.5%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-26668EPSS 1.3%
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- 6.5CVE-2025-26667EPSS 1.9%
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.0CVE-2025-26665EPSS 0.3%
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-26664EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 8.1CVE-2025-26663EPSS 1.8%
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2025-26652EPSS 2.4%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2025-26648EPSS 0.5%
Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2025-26647EPSS 2.3%
Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
- 7.5CVE-2025-26641EPSS 2.3%
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- 6.8CVE-2025-26637EPSS 0.9%
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- 8.8CVE-2025-21222EPSS 1.4%
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-21221EPSS 1.4%
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-21205EPSS 1.4%
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-21204EPSS 7.1%
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-21203EPSS 1.7%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-21197EPSS 3.3%
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
- 7.0CVE-2025-21191EPSS 0.3%
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2025-21174EPSS 2.2%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.0CVE-2025-26633KEVExploitEPSS 30%
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- 6.5CVE-2025-24996EPSS 1.3%
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 7.8CVE-2025-24993KEVEPSS 2.2%
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- 5.5CVE-2025-24992EPSS 1.1%
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2025-24991KEVEPSS 2.0%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 6.8CVE-2025-24988EPSS 0.7%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
- 6.8CVE-2025-24987EPSS 0.7%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
- 7.8CVE-2025-24985KEVEPSS 3.9%
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
- 4.6CVE-2025-24984KEVEPSS 2.0%
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- 7.0CVE-2025-24983KEVEPSS 1.9%
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24072EPSS 0.5%
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-24071ExploitEPSS 23%
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
- 8.1CVE-2025-24064EPSS 1.3%
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-24059EPSS 0.5%
Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2025-24056EPSS 1.6%
Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
- 4.3CVE-2025-24055EPSS 0.9%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
- 5.4CVE-2025-24054KEVExploitEPSS 62%
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 8.8CVE-2025-24051EPSS 1.5%
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2025-24045EPSS 1.3%
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-24044EPSS 0.6%
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 8.1CVE-2025-24035EPSS 1.7%
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 4.3CVE-2025-21247EPSS 3.1%
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
- 7.8CVE-2025-21180EPSS 0.9%
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-21420EPSS 3.7%
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
- 7.1CVE-2025-21419EPSS 0.7%
Windows Setup Files Cleanup Elevation of Privilege Vulnerability