Microsoft Windows Server 2012 R2 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2012 R2 (Server Core installation): 1808 record(s), with affected versions and fixes.
CVE-2026-85376
High · 7.8
CWE-1390 Oct 13, 2026
Windows Print Spooler Components Elevation of Privilege Vulnerability
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85375
High · 7.8
CWE-416 Oct 13, 2026
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85374
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85373
High · 7.8
CWE-122 Oct 13, 2026
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85372
High · 7.0
CWE-416 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85371
High · 8.1
CWE-416 Oct 13, 2026
Network Policy Server (NPS) Remote Code Execution Vulnerability
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-85370
High · 7.0
CWE-416 Oct 13, 2026
WebDAV Elevation of Privilege Vulnerability
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85368
High · 7.8
CWE-122 Oct 13, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85366
High · 7.8
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85365
High · 7.0
CWE-122 Oct 13, 2026
Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-85364
High · 7.0
CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85362
High · 7.0
CWE-763 Oct 13, 2026
Windows Management Instrumentation Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-85361
High · 7.0
CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85359
High · 7.8
CWE-94 Oct 13, 2026
Windows Performance Monitor Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85358
High · 7.8
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85356
High · 7.8
CWE-125 Oct 13, 2026
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85355
High · 7.0
CWE-829 Oct 13, 2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85354
High · 7.0
CWE-416 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85353
High · 7.5
CWE-125 Oct 13, 2026
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85352
High · 7.0
CWE-416 Oct 13, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85343
High · 7.8
CWE-59 Oct 13, 2026
Windows Hyper-V Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85342
High · 7.0
CWE-416 Oct 13, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85341
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85339
High · 8.8
CWE-122 Oct 13, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85337
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.