Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

r2-sp1
11
sp2
1

Microsoft Windows Server 2012 R2Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities

Risk 49
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

1 / 5
Source: Launchpad
First published (updated )
CVE-2023-50387

Microsoft Windows Server 2012 R2Windows TCP/IP Information Disclosure Vulnerability

Risk 32
Severity
5.5
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Windows TCP/IP Information Disclosure Vulnerability

First published (updated )
CVE-2023-38160

Microsoft Windows Server 2012 R2DHCP Server Service Information Disclosure Vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

DHCP Server Service Information Disclosure Vulnerability

First published (updated )
CVE-2023-36801

Microsoft Windows Server 2012 R2Windows GDI Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows GDI Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-36804

Microsoft Windows Server 2012 R2Windows MSHTML Platform Security Feature Bypass Vulnerability

Risk 62
Severity
7
Command Injection
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows MSHTML Platform Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-36805

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38139

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38142

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38141

Microsoft Windows Server 2012 R2Windows Common Log File System Driver Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Common Log File System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38143

Microsoft Windows Server 2012 R2Windows Common Log File System Driver Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Common Log File System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38144

Microsoft Windows Server 2012 R2Windows TCP/IP Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows TCP/IP Denial of Service Vulnerability

First published (updated )
CVE-2023-38149

Microsoft Windows Server 2012 R2DHCP Server Service Information Disclosure Vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

DHCP Server Service Information Disclosure Vulnerability

First published (updated )
CVE-2023-38152

Microsoft Windows Server 2012 R2Windows GDI Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows GDI Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-38161

Microsoft Windows Server 2012 R2Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

Risk 74
Severity
8.4
Input Validation
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36719

Microsoft Windows Server 2012 R2Windows User Interface Application Core Remote Code Execution Vulnerability

Risk 68
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows User Interface Application Core Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36393

Microsoft Windows Server 2012 R2Windows Deployment Services Denial of Service Vulnerability

Risk 43
Severity
7.5
Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Deployment Services Denial of Service Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36395

Microsoft Windows Server 2012 R2Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Risk 90
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36397

Microsoft Windows Server 2012 R2Microsoft Remote Registry Service Remote Code Execution Vulnerability

Risk 66
Severity
7.2
Integer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Remote Registry Service Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36401

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 63
Severity
7
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36403

Microsoft Windows Server 2012 R2Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36402

Microsoft Windows Server 2012 R2Windows Installer Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Installer Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-36705

Microsoft Windows Server 2012 R2Windows Scripting Engine Memory Corruption Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Scripting Engine Memory Corruption Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36017

Microsoft Windows Server 2012 R2Microsoft Remote Registry Service Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Remote Registry Service Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36423

Microsoft Windows Server 2012 R2Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Risk 65
Severity
8
AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36425

Microsoft Windows Server 2012 R2Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Risk 32
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-36428

Microsoft Windows Server 2012 R2Windows Remote Access Connection Manager Information Disclosure Vulnerability

Risk 32
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Windows Remote Access Connection Manager Information Disclosure Vulnerability

First published (updated )
CVE-2024-30039

Microsoft Windows Server 2008Win32k Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Null Pointer Dereference
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Win32k Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-30030

Microsoft Windows Server 2012 R2Windows Cryptographic Services Remote Code Execution Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Cryptographic Services Remote Code Execution Vulnerability

First published (updated )
CVE-2024-30020

Microsoft Windows Server 2012 R2Windows Common Log File System Driver Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Common Log File System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-30025

Microsoft Windows 7Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Risk 68
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Windows CD-ROM File System Driver Remote Code Execution Vulnerability.

1 / 2
First published (updated )
CVE-2022-38044

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203