Vulnerabilities > Microsoft > Windows Server 2012 > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-43215 Out-of-bounds Write vulnerability in Microsoft products
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
network
low complexity
microsoft CWE-787
critical
9.8
2020-07-14 CVE-2020-1032 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1036 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1040 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1041 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1042 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1043 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1350 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft
critical
10.0
2020-05-21 CVE-2020-1112 Unrestricted Upload of File with Dangerous Type vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
network
low complexity
microsoft CWE-434
critical
9.9
2020-01-14 CVE-2020-0609 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'.
network
low complexity
microsoft
critical
9.8