CVE Intelligence

Microsoft Windows Server 2012 (Server Core installation) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows Server 2012 (Server Core installation): 1703 record(s), with affected versions and fixes.

CVE-2026-78459 High · 7.8 CWE-122 Oct 13, 2026
Microsoft Internet Information Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-77496 High · 8.8 CWE-122 Oct 13, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73027 High · 7.8 CWE-15 Oct 13, 2026
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-70566 High · 7.8 CWE-476 Oct 13, 2026
Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-70303 High · 7.8 CWE-787 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70295 Medium · 5.5 CWE-125 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70294 Medium · 5.5 CWE-20 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70293 Medium · 5.5 CWE-908 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70292 Medium · 5.5 CWE-125 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70288 Medium · 5.5 CWE-367 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70286 High · 7.8 CWE-122 Oct 13, 2026
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-70284 Medium · 5.5 CWE-908 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70278 High · 7.8 CWE-122 Oct 13, 2026
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-70277 Medium · 5.5 CWE-125 Oct 13, 2026
Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
CVE-2026-70275 High · 8.8 CWE-822 Oct 13, 2026
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70272 High · 7.0 CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70271 High · 7.0 CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70262 High · 8.8 CWE-122 Oct 13, 2026
WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70261 Medium · 5.5 CWE-497 Oct 13, 2026
Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
CVE-2026-70260 Medium · 5.5 CWE-497 Oct 13, 2026
Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
CVE-2026-70258 High · 8.8 CWE-122 Oct 13, 2026
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-70252 High · 7.0 CWE-416 Oct 13, 2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70250 High · 8.8 CWE-362 Oct 13, 2026
Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70247 High · 7.8 CWE-125 Oct 13, 2026
HTTP.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
CVE-2026-70245 High · 7.8 CWE-843 Oct 13, 2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.