Microsoft Windows Server 2012 vulnerabilities

CVE-2026-88119 High · 8.1 CWE-416 Oct 13, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88118 High · 7.8 CWE-122 Oct 13, 2026

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88117 High · 8.1 CWE-416 Oct 13, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88115 High · 8.8 CWE-125 Oct 13, 2026

Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88112 High · 8.8 CWE-822 Oct 13, 2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88101 High · 7.8 CWE-1390 Oct 13, 2026

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88098 High · 7.0 CWE-822 Oct 13, 2026

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-88096 High · 7.0 CWE-362 Oct 13, 2026

Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88091 High · 7.8 CWE-502 Oct 13, 2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080 High · 7.8 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 High · 7.0 CWE-476 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 High · 7.8 CWE-125 Oct 13, 2026

Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87715 High · 7.0 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87714 Medium · 6.5 CWE-862 Oct 13, 2026

WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-87712 High · 7.8 CWE-416 Oct 13, 2026

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-87711 High · 7.8 CWE-121 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87710 High · 7.0 CWE-362 Oct 13, 2026

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-87708 High · 7.0 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87707 High · 7.8 CWE-122 Oct 13, 2026

Windows Fax and Scan Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87706 High · 7.8 CWE-122 Oct 13, 2026

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-87705 High · 7.4 CWE-940 Oct 13, 2026

Windows Hyper-V Security Feature Bypass Vulnerability

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2026-87704 High · 7.0 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87702 High · 7.8 CWE-190 Oct 13, 2026

Windows Resource Management (MRM) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-87700 High · 7.8 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87699 High · 7.8 CWE-122 Oct 13, 2026

Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.