Microsoft Windows Server 2012 vulnerabilities

CVE-2026-69514 High · 7.5 CWE-122 Sep 8, 2026

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69511 High · 8.8 CWE-122 Sep 8, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69510 High · 8.1 CWE-121 Sep 8, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69509 High · 7.8 CWE-122 Sep 8, 2026

Role: Windows Fax Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69505 High · 8.0 CWE-125 Sep 8, 2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69504 Medium · 5.5 CWE-125 Sep 8, 2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-69500 High · 7.0 CWE-416 Sep 8, 2026

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-69499 High · 8.8 CWE-190 Sep 8, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69497 Medium · 6.5 CWE-401 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.

CVE-2026-69496 Critical · 9.8 CWE-122 Sep 8, 2026

Windows Compressed Folder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

CVE-2026-69495 High · 8.8 CWE-122 Sep 8, 2026

Windows Event Logging Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69494 High · 8.8 CWE-122 Sep 8, 2026

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69493 Critical · 9.8 CWE-122 Sep 8, 2026

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69492 High · 7.0 CWE-122 Sep 8, 2026

Windows Partition Management Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69491 Critical · 9.8 CWE-122 Sep 8, 2026

Microsoft DirectMusic Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-69490 Medium · 6.8 CWE-125 Sep 8, 2026

Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69488 High · 7.0 CWE-416 Sep 8, 2026

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69483 Medium · 4.7 CWE-125 Sep 8, 2026

Windows Image Acquisition Information Disclosure Vulnerability

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.

CVE-2026-69481 High · 8.0 CWE-122 Sep 8, 2026

Windows Enterprise App Management Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-69479 High · 8.4 CWE-122 Sep 8, 2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69475 High · 7.8 CWE-822 Sep 8, 2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69474 Medium · 4.8 CWE-126 Sep 8, 2026

Windows Overlay Filter Information Disclosure Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

CVE-2026-69473 High · 7.0 CWE-416 Sep 8, 2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69468 High · 7.0 CWE-122 Sep 8, 2026

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69466 High · 7.0 CWE-367 Sep 8, 2026

Windows Kernel Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.