Microsoft Windows Server 2012 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2012: 1860 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2012
CVE-2026-69576
High · 7.8
CWE-416 Sep 8, 2026
Graphic Fonts Elevation of Privilege Vulnerability
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-69573
High · 7.0
CWE-416 Sep 8, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69572
Medium · 5.7
CWE-125 Sep 8, 2026
Windows SMB Client Information Disclosure Vulnerability
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
CVE-2026-69571
High · 7.8
CWE-122 Sep 8, 2026
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69569
Medium · 5.7
CWE-822 Sep 8, 2026
Windows Print Spooler Components Denial of Service Vulnerability
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
CVE-2026-69568
Medium · 5.5
CWE-125 Sep 8, 2026
Storage Spaces Controller Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
CVE-2026-69567
High · 7.0
CWE-416 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69566
Medium · 6.8
CWE-122 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69564
High · 7.0
CWE-122 Sep 8, 2026
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVE-2026-69561
High · 7.8
CWE-125 Sep 8, 2026
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69560
High · 7.0
CWE-416 Sep 8, 2026
Windows Work Folder Service Elevation of Privilege Vulnerability
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69554
Medium · 5.5
CWE-306 Sep 8, 2026
Microsoft Windows Search Component Tampering Vulnerability
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69552
Medium · 5.7
CWE-209 Sep 8, 2026
Windows Print Spooler Components Information Disclosure Vulnerability
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
CVE-2026-69551
High · 8.8
CWE-416 Sep 8, 2026
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-69548
Medium · 4.6
CWE-122 Sep 8, 2026
Windows RNDIS Information Disclosure Vulnerability
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-69547
High · 8.8
CWE-122 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-69546
High · 8.1
CWE-416 Sep 8, 2026
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69541
High · 7.8
CWE-122 Sep 8, 2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69539
High · 7.5
CWE-416 Sep 8, 2026
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69538
High · 7.8
CWE-125 Sep 8, 2026
Windows Spaceport.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-69532
High · 7.8
CWE-125 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69527
Medium · 5.5
CWE-125 Sep 8, 2026
Windows USB Mass Storage Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
CVE-2026-69525
Critical · 9.8
CWE-416 Sep 8, 2026
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69524
High · 8.1
CWE-416 Sep 8, 2026
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69518
High · 8.8
CWE-122 Sep 8, 2026
Windows Remote Desktop Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.