Microsoft Windows Server 2012 vulnerabilities

CVE-2026-70261 Medium · 5.5 CWE-497 Oct 13, 2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70260 Medium · 5.5 CWE-497 Oct 13, 2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70258 High · 8.8 CWE-122 Oct 13, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-70252 High · 7.0 CWE-416 Oct 13, 2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70250 High · 8.8 CWE-362 Oct 13, 2026

Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70247 High · 7.8 CWE-125 Oct 13, 2026

HTTP.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

CVE-2026-70245 High · 7.8 CWE-843 Oct 13, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70244 Medium · 6.5 CWE-125 Oct 13, 2026

Windows DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-70241 High · 7.0 CWE-416 Oct 13, 2026

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70238 High · 7.8 CWE-122 Oct 13, 2026

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-70237 High · 7.0 CWE-416 Oct 13, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70236 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70233 High · 7.8 CWE-122 Oct 13, 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70232 Medium · 5.5 CWE-497 Oct 13, 2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70229 High · 8.1 CWE-863 Oct 13, 2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70225 High · 7.8 CWE-843 Oct 13, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70223 High · 7.0 CWE-416 Oct 13, 2026

Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70222 High · 7.8 CWE-23 Oct 13, 2026

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70211 Medium · 5.5 CWE-125 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70210 High · 8.8 CWE-122 Oct 13, 2026

Windows OLE DB Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70209 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70208 Medium · 5.5 CWE-125 Oct 13, 2026

HTTP.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-70207 High · 7.5 CWE-122 Oct 13, 2026

Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

CVE-2026-70205 High · 7.0 CWE-843 Oct 13, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70201 Medium · 5.5 CWE-125 Oct 13, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.