Product · Microsoft

Windows Server 2012 R2

4,119 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,119 results · Feed

Unscored —

CVE-2019-0549

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
Unscored —

CVE-2019-0570 Public exploit

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Wind…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
Unscored —

CVE-2018-8641

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
High 8.4

CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV Mar 3, 2025
Unscored —

CVE-2018-8514

An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in mem…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
Unscored —

CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8626 EPSS 21%

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly han…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8596

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8622

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows

Dec 12, 2018
Unscored —

CVE-2018-8477

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8476 EPSS 65%

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8256 EPSS 23%

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8553 EPSS 19%

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8485

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8450 EPSS 16%

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote …

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8547

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Fede…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8408

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializ…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8544 Public exploit EPSS 48%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8562

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8415

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft Po…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8563

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…

Microsoft Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows

Nov 14, 2018
Unscored —

CVE-2018-8482

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Wi…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
High 7.8

CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
KEV Jan 21, 2022
Unscored —

CVE-2018-8413 Public exploit EPSS 46%

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8320

A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypas…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8486

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8330

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8472 EPSS 19%

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8494 EPSS 22%

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8484

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8489

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8423 EPSS 32%

A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine R…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8481

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Wi…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, …

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows

Oct 10, 2018
Unscored —

CVE-2018-8411 Public exploit

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8333

An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Mic…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018