InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,202 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,202
Show in the list
Critical, last 7 days
329
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list
Clear

Showing CVEs that name the product microsoft:windows_server_2012. Show all products

1,857 CVEs, showing 1701 to 1750PreviousPage 35 of 38Next
CVESeverityTitlePublished
CVE-2025-55695Low 3.3Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.Oct 14, 2025
CVE-2025-55692High 7.8Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.Oct 14, 2025
CVE-2025-55687High 7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.Oct 14, 2025
CVE-2025-55678High 7.0Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.Oct 14, 2025
CVE-2025-55335High 7.0Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.Oct 14, 2025
CVE-2025-25004High 7.3Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.Oct 14, 2025
CVE-2025-24052High 7.8Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.Oct 14, 2025
CVE-2025-59287
Known exploited
Critical 9.8Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-59230
Known exploited
High 7.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-24990
Known exploited
High 7.8Windows Agere Modem Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-33073
Known exploited
High 8.8Windows SMB Client Elevation of Privilege Vulnerability
Assigned by microsoft
Jun 10, 2025
CVE-2025-33053
Known exploited
High 8.8Internet Shortcut Files Remote Code Execution Vulnerability
Assigned by microsoft
Jun 10, 2025
CVE-2025-47827
Known exploited
Medium 4.6In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature.
Assigned by mitre
Jun 5, 2025
CVE-2025-30397
Known exploited
High 7.5Scripting Engine Memory Corruption Vulnerability
Assigned by microsoft
May 13, 2025
CVE-2025-32709
Known exploited
High 7.8Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Assigned by microsoft
May 13, 2025
CVE-2025-32706
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
May 13, 2025
CVE-2025-32701
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
May 13, 2025
CVE-2025-29824
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Apr 8, 2025
CVE-2025-26633
Known exploited
High 7.0Microsoft Management Console Security Feature Bypass Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24993
Known exploited
High 7.8Windows NTFS Remote Code Execution Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24991
Known exploited
Medium 5.5Windows NTFS Information Disclosure Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24985
Known exploited
High 7.8Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24984
Known exploited
Medium 4.6Windows NTFS Information Disclosure Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24983
Known exploited
High 7.0Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-24054
Known exploited
Medium 6.5NTLM Hash Disclosure Spoofing Vulnerability
Assigned by microsoft
Mar 11, 2025
CVE-2025-21418
Known exploited
High 7.8Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Assigned by microsoft
Feb 11, 2025
CVE-2024-49138
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Dec 10, 2024
CVE-2024-43451
Known exploited
Medium 6.5NTLM Hash Disclosure Spoofing Vulnerability
Assigned by microsoft
Nov 12, 2024
CVE-2024-43572
Known exploited
High 7.8Microsoft Management Console Remote Code Execution Vulnerability
Assigned by microsoft
Oct 8, 2024
CVE-2024-43573
Known exploited
Medium 6.5Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Oct 8, 2024
CVE-2024-43461
Known exploited
High 8.8Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-38217
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-38014
Known exploited
High 7.8Windows Installer Elevation of Privilege Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-38107
Known exploited
High 7.8Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38213
Known exploited
Medium 6.5Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38193
Known exploited
High 7.8Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38178
Known exploited
High 7.5Scripting Engine Memory Corruption Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38112
Known exploited
High 7.5Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Jul 9, 2024
CVE-2024-35250
Known exploited
High 7.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Jun 11, 2024
CVE-2024-26169
Known exploited
High 7.8Windows Error Reporting Service Elevation of Privilege Vulnerability
Assigned by microsoft
Mar 12, 2024
CVE-2023-36025
Known exploited
High 8.8Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36036
Known exploited
High 7.8Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36424
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36563
Known exploited
Medium 6.5Microsoft WordPad Information Disclosure Vulnerability
Assigned by microsoft
Oct 10, 2023
CVE-2023-36584
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Oct 10, 2023
CVE-2023-36884
Known exploited
High 7.5Windows Search Remote Code Execution Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-36874
Known exploited
High 7.8Windows Error Reporting Service Elevation of Privilege Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-32046
Known exploited
High 7.8Windows MSHTML Platform Elevation of Privilege Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-29336
Known exploited
High 7.8Win32k Elevation of Privilege Vulnerability
Assigned by microsoft
May 9, 2023
CVE-2023-28252
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Apr 11, 2023
PreviousPage 35 of 38Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.