Microsoft Windows Server 2012 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2012 (Server Core installation): 1703 record(s), with affected versions and fixes.
CVE-2026-83682
High · 7.0
CWE-416 Oct 13, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83680
High · 7.0
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83678
High · 7.8
CWE-122 Oct 13, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83672
Medium · 4.7
CWE-497 Oct 13, 2026
Windows Installer Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-83670
High · 7.5
CWE-125 Oct 13, 2026
Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
CVE-2026-83668
Medium · 5.5
CWE-125 Oct 13, 2026
Windows WLAN Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
CVE-2026-83667
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83666
High · 7.0
CWE-362 Oct 13, 2026
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83665
High · 7.5
CWE-476 Oct 13, 2026
Windows DHCP Server Denial of Service Vulnerability
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83664
Medium · 5.5
CWE-843 Oct 13, 2026
Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
CVE-2026-83659
High · 7.8
CWE-59 Oct 13, 2026
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83655
High · 7.5
CWE-125 Oct 13, 2026
Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83652
High · 7.8
CWE-122 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83651
Medium · 6.5
CWE-125 Oct 13, 2026
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83650
High · 7.8
CWE-122 Oct 13, 2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83645
High · 7.5
CWE-770 Oct 13, 2026
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83643
High · 8.8
CWE-121 Oct 13, 2026
Windows Error Reporting Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83642
High · 8.8
CWE-843 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83641
High · 7.8
CWE-122 Oct 13, 2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83640
High · 7.8
CWE-122 Oct 13, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83638
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83637
High · 7.8
CWE-125 Oct 13, 2026
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83635
High · 7.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83588
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83585
High · 7.8
CWE-134 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.