Microsoft Windows Server 2012 vulnerabilities

CVE-2026-85828 [HIGH] CWE-122 CVE-2026-85828: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-85834 [HIGH] CWE-122 CVE-2026-85834: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-83683 [MEDIUM] CWE-36 CVE-2026-83683: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

CVE-2025-49670 [MEDIUM] CWE-122 CVE-2025-49670: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-85841 [MEDIUM] CWE-416 CVE-2026-85841: Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2020-1212 [HIGH] CVE-2020-1212: An elevation of privilege vulnerability exists when an OLE Automation component improperly handles m An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.

CVE-2026-61920 [MEDIUM] CWE-362 CVE-2026-61920: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2017-8590 [HIGH] CWE-281 CVE-2017-8590: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka "Windows CLFS Elevation of P

CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2020-17055 [HIGH] CVE-2020-17055: Windows Remote Access Elevation of Privilege Vulnerability Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17044 [HIGH] CVE-2020-17044: Windows Remote Access Elevation of Privilege Vulnerability Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17043 [HIGH] CVE-2020-17043: Windows Remote Access Elevation of Privilege Vulnerability Windows Remote Access Elevation of Privilege Vulnerability

CVE-2021-26433 [HIGH] CVE-2021-26433: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili

CVE-2017-0180 [HIGH] CVE-2017-0180: A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host s A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0181.