Windows Server 2012 R2 (Microsoft) - vulnerabilities (CVEs)

131 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-01-08. Vendor: Microsoft.

CVEs of Windows Server 2012 R2

CVE-2019-0581 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0584 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0583 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0582 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0570 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege…
CVE-2019-0577 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0569 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0576 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0580 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0575 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0579 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0552 - CVSS 8.8 (high), 2019-01-08: An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2,…
CVE-2019-0549 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0536 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0554 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8641 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k…
CVE-2018-8639 - CVSS 8.4 (high), 2018-12-12: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8626 - CVSS 9.8 (critical), 2018-12-12: A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server…
CVE-2018-8622 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8514 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime…
CVE-2018-8611 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8477 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8596 - CVSS 6.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8595 - CVSS 6.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8553 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote…
CVE-2018-8563 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This…
CVE-2018-8547 - CVSS 5.4 (medium), 2018-11-14: A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not…
CVE-2018-8562 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8561 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This…
CVE-2018-8565 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure…
CVE-2018-8485 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This…
CVE-2018-8408 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8476 - CVSS 9.8 (critical), 2018-11-14: A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment…
CVE-2018-8407 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC…
CVE-2018-8450 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This…
CVE-2018-8544 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution…
CVE-2018-8256 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution…
CVE-2018-8415 - CVSS 7.8 (high), 2018-11-14: A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This…
CVE-2018-8494 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…
CVE-2018-8493 - CVSS 7.5 (high), 2018-10-10: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information…
CVE-2018-8481 - CVSS 3.1 (low), 2018-10-10: An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information…
CVE-2018-8486 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This…
CVE-2018-8484 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
CVE-2018-8482 - CVSS 3.1 (low), 2018-10-10: An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information…
CVE-2018-8489 - CVSS 8.4 (high), 2018-10-10: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2018-8423 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability."…
CVE-2018-8472 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to…
CVE-2018-8453 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8330 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8413 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution…
CVE-2018-8320 - CVSS 4.3 (medium), 2018-10-10: A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows…
CVE-2018-8411 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7,…
CVE-2018-8333 - CVSS 7 (high), 2018-10-10: An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of…
CVE-2018-8475 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution…
CVE-2018-8468 - CVSS 4.7 (medium), 2018-09-13: An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects…
CVE-2018-8455 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8446 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8440 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of…
CVE-2018-8444 - CVSS 5.9 (medium), 2018-09-13: An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka "Windows…
CVE-2018-8439 - CVSS 8.4 (high), 2018-09-13: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2018-8443 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8438 - CVSS 6.8 (medium), 2018-09-13: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a…
CVE-2018-8442 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8434 - CVSS 5.4 (medium), 2018-09-13: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on…
CVE-2018-8433 - CVSS 4.7 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Graphics Component…
CVE-2018-8419 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information…
CVE-2018-8410 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of…
CVE-2018-8424 - CVSS 6.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8420 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…
CVE-2018-8392 - CVSS 7.8 (high), 2018-09-13: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET…
CVE-2018-8393 - CVSS 7.8 (high), 2018-09-13: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET…
CVE-2018-8271 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka…
CVE-2018-8335 - CVSS 7.5 (high), 2018-09-13: A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka…
CVE-2018-8332 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote…
CVE-2018-8405 - CVSS 7.8 (high), 2018-08-15: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
CVE-2018-8398 - CVSS 6.5 (medium), 2018-08-15: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8404 - CVSS 7 (high), 2018-08-15: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8394 - CVSS 6.5 (medium), 2018-08-15: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8348 - CVSS 4.7 (medium), 2018-08-15: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8349 - CVSS 8.8 (high), 2018-08-15: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for…
CVE-2018-8341 - CVSS 4.7 (medium), 2018-08-15: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8345 - CVSS 7.5 (high), 2018-08-15: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code…
CVE-2018-8344 - CVSS 8.8 (high), 2018-08-15: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote…
CVE-2018-8343 - CVSS 7.8 (high), 2018-08-15: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior…
CVE-2018-8340 - CVSS 6.5 (medium), 2018-08-15: A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka…
CVE-2018-8339 - CVSS 7 (high), 2018-08-15: An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure…
CVE-2018-8314 - CVSS 4.7 (medium), 2018-07-11: An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This…
CVE-2018-8313 - CVSS 7.8 (high), 2018-07-11: An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege…
CVE-2018-8309 - CVSS 5.5 (medium), 2018-07-11: A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects…
CVE-2018-8282 - CVSS 7.8 (high), 2018-07-11: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k…
CVE-2018-8308 - CVSS 6.6 (medium), 2018-07-11: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8307 - CVSS 5.3 (medium), 2018-07-11: A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass…
CVE-2018-8304 - CVSS 5.9 (medium), 2018-07-11: A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI…
CVE-2018-8206 - CVSS 7.5 (high), 2018-07-11: A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service…
CVE-2018-8251 - CVSS 7.5 (high), 2018-06-14: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption…
CVE-2018-8225 - CVSS 8.1 (high), 2018-06-14: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows…
CVE-2018-8210 - CVSS 7.8 (high), 2018-06-14: A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This…
CVE-2018-8169 - CVSS 7 (high), 2018-06-14: An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka…
CVE-2018-1040 - CVSS 5.3 (medium), 2018-06-14: A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of…
CVE-2018-8207 - CVSS 4.7 (medium), 2018-06-14: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…