Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 108 of 262
CVE-2026-96950P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96950 [HIGH] CWE-416 CVE-2026-96950: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87702P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-87702 [HIGH] CWE-190 CVE-2026-87702: Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83857P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83857 [HIGH] CWE-121 CVE-2026-83857: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83872P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83872 [HIGH] CWE-681 CVE-2026-83872: Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevat
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83727P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83727 [HIGH] CWE-126 CVE-2026-83727: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96118P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96118 [HIGH] CWE-125 CVE-2026-96118: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70247P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70247 [HIGH] CWE-125 CVE-2026-70247: Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-69584P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69584 [HIGH] CWE-190 CVE-2026-69584: Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68832P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68832 [HIGH] CWE-190 CVE-2026-68832: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72965P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-72965 [HIGH] CWE-416 CVE-2026-72965: Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges loca
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69269P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69269 [HIGH] CWE-191 CVE-2026-69269: Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to el
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69844P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69844 [HIGH] CWE-125 CVE-2026-69844: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69475P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69475 [HIGH] CWE-822 CVE-2026-69475: Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to el
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69821P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69821 [HIGH] CWE-116 CVE-2026-69821: Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an a
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68875P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68875 [HIGH] CWE-126 CVE-2026-68875: Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-69421P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69421 [HIGH] CWE-122 CVE-2026-69421: Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker t
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69532P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69532 [HIGH] CWE-125 CVE-2026-69532: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69538P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69538 [HIGH] CWE-125 CVE-2026-69538: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-69312P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69312 [HIGH] CWE-125 CVE-2026-69312: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69582P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69582 [HIGH] CWE-126 CVE-2026-69582: Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd