Microsoft Windows Server 2012 vulnerabilities

CVE-2026-70133 High · 7.5 CWE-770 Oct 13, 2026

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-70132 High · 7.8 CWE-122 Oct 13, 2026

Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70131 High · 7.8 CWE-122 Oct 13, 2026

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70127 High · 8.1 CWE-416 Oct 13, 2026

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70123 High · 7.8 CWE-122 Oct 13, 2026

Microsoft Graphics Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70113 High · 7.8 CWE-190 Oct 13, 2026

Windows Client for NFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70111 High · 8.1 CWE-822 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70110 High · 7.8 CWE-121 Oct 13, 2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70109 High · 7.8 CWE-122 Oct 13, 2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70108 High · 7.8 CWE-122 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 High · 7.8 CWE-122 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70096 Critical · 9.8 CWE-122 Oct 13, 2026

Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70095 High · 7.5 CWE-122 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093 High · 7.8 CWE-122 Oct 13, 2026

Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092 High · 7.8 CWE-122 Oct 13, 2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70090 Medium · 5.5 CWE-908 Oct 13, 2026

Windows Netlogon Information Disclosure Vulnerability

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

CVE-2026-70089 High · 8.8 CWE-122 Oct 13, 2026

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70087 Medium · 5.5 CWE-863 Oct 13, 2026

Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70085 Medium · 5.5 CWE-862 Oct 13, 2026

Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70083 Medium · 5.5 CWE-863 Oct 13, 2026

Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70082 High · 7.5 CWE-248 Oct 13, 2026

Windows DNS Denial of Service Vulnerability

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70079 High · 7.5 CWE-841 Oct 13, 2026

Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70077 Medium · 4.7 CWE-416 Oct 13, 2026

Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70074 Medium · 5.5 CWE-125 Oct 13, 2026

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-70072 Medium · 6.5 CWE-770 Oct 13, 2026

Windows Netlogon Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.