Microsoft Windows Server 2012 vulnerabilities

CVE-2026-100220 High · 8.8 CWE-122 Oct 13, 2026

Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

CVE-2026-100218 High · 8.1 CWE-416 Oct 13, 2026

Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-100202 Critical · 9.8 CWE-416 Oct 13, 2026

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

CVE-2026-85880 High · 7.8 KEV High · 54 CWE-122 Sep 8, 2026

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-85360 High · 7.0 CWE-416 Sep 8, 2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-84001 High · 7.5 CWE-125 Sep 8, 2026

Windows Key Distribution Center Denial of Service Vulnerability

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

CVE-2026-84000 High · 7.8 CWE-122 Sep 8, 2026

Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

CVE-2026-83996 High · 8.8 CWE-122 Sep 8, 2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83995 High · 7.8 CWE-122 Sep 8, 2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83992 High · 8.8 CWE-122 Sep 8, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-83989 High · 7.5 CWE-125 Sep 8, 2026

Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.

CVE-2026-81955 High · 8.8 CWE-122 Sep 8, 2026

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-81355 High · 7.8 CWE-122 Sep 8, 2026

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

CVE-2026-80096 High · 8.8 CWE-125 Sep 8, 2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-78523 High · 7.5 CWE-416 Sep 8, 2026

Windows DNS Server Denial of Service Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-78516 Medium · 4.3 CWE-126 Sep 8, 2026

Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

CVE-2026-78508 Medium · 4.6 CWE-125 Sep 8, 2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78453 Medium · 6.5 CWE-191 Sep 8, 2026

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-78449 High · 8.1 CWE-416 Sep 8, 2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-78445 Critical · 9.8 CWE-416 Sep 8, 2026

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-78446 High · 7.5 CWE-416 Sep 8, 2026

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-77905 High · 7.0 CWE-416 Sep 8, 2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-77904 High · 7.8 CWE-122 Sep 8, 2026

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77899 High · 7.0 CWE-416 Sep 8, 2026

Windows Security Center Elevation of Privilege Vulnerability

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-77895 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.