Microsoft Windows Server 2012 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Server 2012, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

• CVE-2015-0014 — CVSS 10.0 (critical): Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…
• CVE-2013-3195 — CVSS 10.0 (critical): The DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2…
• CVE-2020-1350 — CVSS 10.0 (critical) — actively exploited: A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows…
• CVE-2015-2373 — CVSS 10.0 (critical): The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to…
• CVE-2020-1467 — CVSS 10.0 (critical): An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this…
• CVE-2014-6321 — CVSS 10.0 (critical): Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…
• CVE-2013-3175 — CVSS 10.0 (critical): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2021-28476 — CVSS 9.9 (critical): Windows Hyper-V Remote Code Execution Vulnerability
• CVE-2019-1384 — CVSS 9.9 (critical): A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this…
• CVE-2021-26424 — CVSS 9.9 (critical): Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2019-1365 — CVSS 9.9 (critical): An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to…
• CVE-2020-1112 — CVSS 9.9 (critical): An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly…
• CVE-2026-44815 — CVSS 9.8 (critical): Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
• CVE-2025-59287 — CVSS 9.8 (critical) — actively exploited: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
• CVE-2022-29130 — CVSS 9.8 (critical): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2024-38074 — CVSS 9.8 (critical): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
• CVE-2023-35385 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2025-60724 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
• CVE-2022-24491 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2019-0725 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP…
• CVE-2020-17051 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2023-36911 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2024-43639 — CVSS 9.8 (critical): Windows KDC Proxy Remote Code Execution Vulnerability
• CVE-2021-24074 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2026-41089 — CVSS 9.8 (critical): Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
• CVE-2023-32057 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2017-8589 — CVSS 9.8 (critical): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold…
• CVE-2022-34718 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2018-8626 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka…
• CVE-2022-30136 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2022-34721 — CVSS 9.8 (critical): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
• CVE-2024-38077 — CVSS 9.8 (critical): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
• CVE-2022-34722 — CVSS 9.8 (critical): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
• CVE-2020-0609 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to…
• CVE-2020-0610 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to…
• CVE-2023-36910 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2023-32015 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2023-21554 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2023-32014 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2016-3227 — CVSS 9.8 (critical): Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute…
• CVE-2019-0736 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An…
• CVE-2022-24497 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2021-24077 — CVSS 9.8 (critical): Windows Fax Service Remote Code Execution Vulnerability
• CVE-2023-29363 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2026-47291 — CVSS 9.8 (critical): Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.
• CVE-2023-23415 — CVSS 9.8 (critical): Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
• CVE-2021-24078 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2017-8543 — CVSS 9.8 (critical) — actively exploited: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
• CVE-2023-21689 — CVSS 9.8 (critical): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
• CVE-2023-21690 — CVSS 9.8 (critical): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
• CVE-2021-24094 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2016-3236 — CVSS 9.8 (critical): The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
• CVE-2023-36397 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2022-22012 — CVSS 9.8 (critical): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2021-26432 — CVSS 9.8 (critical): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
• CVE-2022-26809 — CVSS 9.8 (critical): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2022-26937 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2019-1181 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated…
• CVE-2025-47981 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.
• CVE-2019-1182 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated…
• CVE-2023-28250 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2023-21692 — CVSS 9.8 (critical): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
• CVE-2019-1212 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who…
• CVE-2021-26877 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2023-36434 — CVSS 9.8 (critical): Windows IIS Server Elevation of Privilege Vulnerability
• CVE-2017-11771 — CVSS 9.8 (critical): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
• CVE-2021-26893 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2023-21708 — CVSS 9.8 (critical): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2024-38140 — CVSS 9.8 (critical): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
• CVE-2024-30080 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2021-26894 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2021-26895 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2021-26897 — CVSS 9.8 (critical): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2016-7182 — CVSS 9.8 (critical): The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…
• CVE-2019-0785 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP…
• CVE-2023-24943 — CVSS 9.8 (critical): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2023-24941 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
• CVE-2018-8476 — CVSS 9.8 (critical): A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka…
• CVE-2019-0626 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP…
• CVE-2025-53766 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
• CVE-2025-21298 — CVSS 9.8 (critical): Windows OLE Remote Code Execution Vulnerability
• CVE-2022-35744 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
• CVE-2024-38063 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2024-38199 — CVSS 9.8 (critical): Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
• CVE-2021-43215 — CVSS 9.8 (critical): iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
• CVE-2023-35367 — CVSS 9.8 (critical): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2023-35366 — CVSS 9.8 (critical): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2023-35365 — CVSS 9.8 (critical): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2023-35349 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2024-49112 — CVSS 9.8 (critical): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2015-1635 — CVSS 9.8 (critical) — actively exploited: HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote…
• CVE-2022-30133 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
• CVE-2025-21307 — CVSS 9.8 (critical): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
• CVE-2017-8686 — CVSS 9.8 (critical): The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code…
• CVE-2021-31962 — CVSS 9.4 (critical): Kerberos AppContainer Security Feature Bypass Vulnerability
• CVE-2015-0092 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2015-0093 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2015-6125 — CVSS 9.3 (critical): Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote…
• CVE-2015-2458 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2015-2515 — CVSS 9.3 (critical): Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2014-1824 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
• CVE-2015-2514 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
• CVE-2015-0096 — CVSS 9.3 (critical): Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
• CVE-2015-0081 — CVSS 9.3 (critical): Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2015-0088 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2015-2530 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
• CVE-2015-2461 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2014-4118 — CVSS 9.3 (critical): XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
• CVE-2015-1699 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-6103 — CVSS 9.3 (critical): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
• CVE-2015-2455 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2014-0301 — CVSS 9.3 (critical): Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2…
• CVE-2015-2459 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2015-1675 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-1695 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-6108 — CVSS 9.3 (critical): The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows…
• CVE-2015-2513 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
• CVE-2015-2435 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2013-3940 — CVSS 9.3 (critical): Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2…
• CVE-2013-0007 — CVSS 9.3 (critical): Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute…
• CVE-2013-3128 — CVSS 9.3 (critical): The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2…
• CVE-2012-1527 — CVSS 9.3 (critical): Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…
• CVE-2015-6104 — CVSS 9.3 (critical): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
• CVE-2015-1696 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-2432 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2012-1528 — CVSS 9.3 (critical): Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2…
• CVE-2015-2456 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-1756 — CVSS 9.3 (critical): Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
• CVE-2015-2430 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-2506 — CVSS 9.3 (critical): atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2015-1697 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-0091 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2016-0088 — CVSS 9.3 (critical): Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the…
• CVE-2015-2519 — CVSS 9.3 (critical): Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…
• CVE-2015-2429 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2015-2464 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2013-3174 — CVSS 9.3 (critical): DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
• CVE-2015-2463 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2014-0263 — CVSS 9.3 (critical): The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2015-1698 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2014-1817 — CVSS 9.3 (critical): usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2…
• CVE-2015-2462 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
• CVE-2015-0090 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
• CVE-2012-2556 — CVSS 9.3 (critical): The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2…
• CVE-2015-6107 — CVSS 9.3 (critical): The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
• CVE-2014-1818 — CVSS 9.3 (critical): GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
• CVE-2013-5056 — CVSS 9.3 (critical): Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows…
• CVE-2026-45602 — CVSS 9.1 (critical): No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
• CVE-2019-0719 — CVSS 9.1 (critical): A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an…
• CVE-2020-1040 — CVSS 9.0 (critical) — actively exploited: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2020-1041 — CVSS 9.0 (critical): A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2020-1036 — CVSS 9.0 (critical): A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2013-1339 — CVSS 9.0 (critical): The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and…
• CVE-2020-1042 — CVSS 9.0 (critical): A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2022-21901 — CVSS 9.0 (critical): Windows Hyper-V Elevation of Privilege Vulnerability
• CVE-2020-1032 — CVSS 9.0 (critical): A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2024-38124 — CVSS 9.0 (critical): Windows Netlogon Elevation of Privilege Vulnerability
• CVE-2020-1043 — CVSS 9.0 (critical): A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
• CVE-2021-28357 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2016-7274 — CVSS 8.8 (high): Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2024-43592 — CVSS 8.8 (high): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2021-28356 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2025-49676 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2024-30078 — CVSS 8.8 (high): Windows Wi-Fi Driver Remote Code Execution Vulnerability
• CVE-2025-21205 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
• CVE-2025-49674 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2025-21208 — CVSS 8.8 (high): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2023-35322 — CVSS 8.8 (high): Windows Deployment Services Remote Code Execution Vulnerability
• CVE-2023-35303 — CVSS 8.8 (high): USB Audio Class System Driver Remote Code Execution Vulnerability
• CVE-2025-49673 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2021-28355 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2025-49672 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2024-38265 — CVSS 8.8 (high): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2021-28354 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2019-1419 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially…
• CVE-2023-35302 — CVSS 8.8 (high): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
• CVE-2021-28353 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2023-35300 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2021-28352 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2021-28346 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2021-28345 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2019-1456 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially…
• CVE-2021-28344 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2021-28343 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2021-28342 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2019-1468 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k…
• CVE-2025-49669 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2025-49668 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2025-21221 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
• CVE-2023-32038 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
• CVE-2025-21222 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
• CVE-2025-49663 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a…
• CVE-2025-21223 — CVSS 8.8 (high): Windows Telephony Service Remote Code Execution Vulnerability
• CVE-2021-28341 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
• CVE-2024-38260 — CVSS 8.8 (high): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
• CVE-2026-42985 — CVSS 8.8 (high): Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2017-0084 — CVSS 8.8 (high): Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
• CVE-2023-29373 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
• CVE-2024-43621 — CVSS 8.8 (high): Windows Telephony Service Remote Code Execution Vulnerability
• CVE-2024-30010 — CVSS 8.8 (high): Windows Hyper-V Remote Code Execution Vulnerability