Vulnerabilidades do Microsoft Windows Server 2012
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows Server 2012: 1854 registro(s), com versões afetadas e correções.cpe:2.3:o:microsoft:windows_server_2012
CVE-2026-103569
Alta · 7.5
CWE-125 13/10/2026
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
CVE-2026-103568
Alta · 7.8
CWE-122 13/10/2026
Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-103560
Média · 5.5
CWE-862 13/10/2026
Role: DNS Server Tampering Vulnerability
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-103558
Alta · 7.5
CWE-833 13/10/2026
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-103555
Alta · 7.0
CWE-122 13/10/2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-103553
Alta · 7.8
CWE-125 13/10/2026
Windows Partition Management Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102225
Alta · 8.8
CWE-125 13/10/2026
Windows Text Shaping Remote Code Execution Vulnerability
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-102220
Alta · 7.8
CWE-416 13/10/2026
Windows VHD miniport driver Elevation of Privilege Vulnerability
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102218
Alta · 7.8
CWE-122 13/10/2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102217
Alta · 8.8
CWE-41 13/10/2026
WebDAV Elevation of Privilege Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
CVE-2026-102216
Alta · 7.8
CWE-843 13/10/2026
Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-102215
Alta · 7.8
CWE-122 13/10/2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102208
Alta · 7.0
CWE-416 13/10/2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-102206
Média · 6.8
CWE-122 13/10/2026
Windows Portable Device MTP Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-102205
Alta · 7.8
CWE-122 13/10/2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102203
Alta · 8.8
CWE-843 13/10/2026
RPC Runtime Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-102199
Média · 6.5
CWE-121 13/10/2026
Microsoft Windows Codecs Library Denial of Service Vulnerability
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
CVE-2026-102198
Média · 5.3
CWE-125 13/10/2026
Windows Remote Desktop Protocol Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
CVE-2026-102194
Alta · 7.0
CWE-416 13/10/2026
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-102188
Média · 6.8
CWE-822 13/10/2026
Windows Storage Port Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-102187
Média · 5.5
CWE-908 13/10/2026
Windows Kernel Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-102186
Média · 4.7
CWE-822 13/10/2026
Windows Network File System Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
CVE-2026-100225
Alta · 7.0
CWE-122 13/10/2026
Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100222
Crítica · 9.8
CWE-122 13/10/2026
Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-100220
Alta · 8.8
CWE-122 13/10/2026
Windows Media Video Decoder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.