Microsoft Windows Server 2012 R2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2012 R2: 1817 record(s), with affected versions and fixes.
CVE-2026-50368
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-50366
Medium · 6.5
CWE-476 Jul 14, 2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-50365
High · 8.0
CWE-287 Jul 14, 2026
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-50363
High · 7.8
CWE-122 Jul 14, 2026
Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-50359
High · 7.8
CWE-416 Jul 14, 2026
Microsoft XML Core Services Elevation of Privilege Vulnerability
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.
CVE-2026-50355
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-50352
Medium · 5.5
CWE-200 Jul 14, 2026
Windows Cryptographic Services Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-50347
High · 7.8
CWE-122 Jul 14, 2026
Windows Data.dll Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.
CVE-2026-50346
High · 7.8
CWE-285 Jul 14, 2026
Netlogon RPC Elevation of Privilege Vulnerability
Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-50344
High · 7.8
CWE-285 Jul 14, 2026
Windows OLE Elevation of Privilege Vulnerability
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-50341
Medium · 5.5
CWE-126 Jul 14, 2026
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-50334
Medium · 5.5
CWE-200 Jul 14, 2026
Windows Push Notification Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.
CVE-2026-50332
High · 7.8
CWE-122 Jul 14, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50330
Critical · 9.8
CWE-122 Jul 14, 2026
Windows Remote Desktop Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-50328
High · 7.5
CWE-20 Jul 14, 2026
Windows Server Update Service (WSUS) Tampering Vulnerability
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.
CVE-2026-50324
Medium · 5.9
CWE-835 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-50321
High · 7.0
CWE-362 Jul 14, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-50313
High · 7.8
CWE-122 Jul 14, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-50312
High · 7.8
CWE-416 Jul 14, 2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-50309
High · 7.8
CWE-122 Jul 14, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-50306
High · 7.8
CWE-190 Jul 14, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-50304
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-49177
Medium · 5.5
CWE-125 Jul 14, 2026
Windows TCP/IP Information Disclosure Vulnerability
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
CVE-2026-58640
High · 7.8
CWE-122 Jul 14, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-58614
Medium · 5.5
CWE-125 Jul 14, 2026
Windows Kernel Security Feature Bypass Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.