Microsoft Windows Server 2012 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2012 (Server Core installation): 1703 record(s), with affected versions and fixes.
CVE-2026-70290
Medium · 5.5
CWE-908 Sep 8, 2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70289
High · 7.8
CWE-122 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70283
High · 7.0
CWE-863 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-70203
High · 8.8
CWE-122 Sep 8, 2026
Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-70145
Medium · 5.5
CWE-125 Sep 8, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70124
High · 7.5
CWE-125 Sep 8, 2026
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70091
Medium · 5.9
CWE-362 Sep 8, 2026
Windows DNS Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-70065
High · 7.5
CWE-401 Sep 8, 2026
Windows DHCP Server Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69989
High · 8.1
CWE-416 Sep 8, 2026
Windows DNS Server Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69930
High · 7.5
CWE-125 Sep 8, 2026
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69929
High · 7.5
CWE-125 Sep 8, 2026
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69911
High · 7.0
CWE-416 Sep 8, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69895
Medium · 4.7
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69878
Medium · 6.4
CWE-122 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-69876
High · 8.0
CWE-415 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69860
High · 8.8
CWE-122 Sep 8, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69859
High · 7.0
CWE-191 Sep 8, 2026
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69853
Medium · 4.7
CWE-908 Sep 8, 2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69852
High · 7.5
CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-69847
High · 8.0
CWE-122 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69845
Critical · 9.8
CWE-20 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69844
High · 7.8
CWE-125 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69841
High · 7.8
CWE-122 Sep 8, 2026
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69839
Medium · 6.5
CWE-248 Sep 8, 2026
Windows iSCSI Target Service Denial of Service Vulnerability
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
CVE-2026-69834
High · 7.0
CWE-416 Sep 8, 2026
Windows ALPC Elevation of Privilege Vulnerability
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.