Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 107 of 262
CVE-2026-25176P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.259732026-03-10
CVE-2026-25176 [HIGH] CWE-284 CVE-2026-25176: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70222P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70222 [HIGH] CWE-23 CVE-2026-70222: Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83873P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83873 [HIGH] CWE-23 CVE-2026-83873: Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70113P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70113 [HIGH] CWE-190 CVE-2026-70113: Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate pr
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69953P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69953 [HIGH] CWE-126 CVE-2026-69953: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83637P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83637 [HIGH] CWE-125 CVE-2026-83637: Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privilege
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69959P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69959 [HIGH] CWE-125 CVE-2026-69959: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
nvd
CVE-2026-69950P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69950 [HIGH] CWE-126 CVE-2026-69950: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83513P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83513 [HIGH] CWE-122 CVE-2026-83513: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69798P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69798 [HIGH] CWE-416 CVE-2026-69798: Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileg
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70064P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70064 [HIGH] CWE-191 CVE-2026-70064: Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69916P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69916 [HIGH] CWE-190 CVE-2026-69916: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72948P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72948 [HIGH] CWE-23 CVE-2026-72948: Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88191P3HIGHCVSS 7.8vr22026-10-13
CVE-2026-88191 [HIGH] CWE-59 CVE-2026-88191: Improper link resolution before file access ('link following') in Microsoft Windows Search Component
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69612P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69612 [HIGH] CWE-36 CVE-2026-69612: Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileg
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69445P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69445 [HIGH] CWE-22 CVE-2026-69445: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-103569P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-103569 [HIGH] CWE-125 CVE-2026-103569: Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-20809P3HIGHCVSS 7.8vr22026-01-13
CVE-2026-20809 [HIGH] CWE-122 CVE-2026-20809: Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized atta
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96946P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96946 [HIGH] CWE-416 CVE-2026-96946: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96947P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96947 [HIGH] CWE-416 CVE-2026-96947: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd