Microsoft Windows Server 2012 vulnerabilities

CVE-2026-35416 [HIGH] CWE-416 CVE-2026-35416: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-105009 [HIGH] CWE-276 CVE-2026-105009: Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elev Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-27908 [HIGH] CWE-416 CVE-2026-27908: Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-21235 [HIGH] CWE-416 CVE-2026-21235: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-87705 [HIGH] CWE-940 CVE-2026-87705: Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2021-26435 [HIGH] CWE-787 CVE-2021-26435: Windows Scripting Engine Memory Corruption Vulnerability Windows Scripting Engine Memory Corruption Vulnerability

CVE-2025-50161 [HIGH] CWE-122 CVE-2025-50161: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-108399 [HIGH] CWE-122 CVE-2026-108399: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-69396 [HIGH] CWE-416 CVE-2026-69396: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69296 [HIGH] CWE-416 CVE-2026-69296: Use after free in Windows Device Association Service allows an authorized attacker to elevate privil Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-68893 [HIGH] CWE-416 CVE-2026-68893: Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69357 [HIGH] CWE-416 CVE-2026-69357: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69274 [HIGH] CWE-416 CVE-2026-69274: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2019-0908 [HIGH] CVE-2019-0908: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili

CVE-2019-1157 [HIGH] CWE-94 CVE-2019-1157: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vuln

CVE-2019-1146 [HIGH] CVE-2019-1146: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili

CVE-2019-1156 [HIGH] CVE-2019-1156: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili

CVE-2019-1147 [HIGH] CVE-2019-1147: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili

CVE-2026-83911 [HIGH] CWE-122 CVE-2026-83911: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-100225 [HIGH] CWE-122 CVE-2026-100225: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.