Microsoft Windows Server 2012 vulnerabilities

CVE-2026-97839 [MEDIUM] CWE-125 CVE-2026-97839: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97836 [MEDIUM] CWE-125 CVE-2026-97836: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97844 [MEDIUM] CWE-125 CVE-2026-97844: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97831 [MEDIUM] CWE-125 CVE-2026-97831: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97843 [MEDIUM] CWE-125 CVE-2026-97843: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-69449 [MEDIUM] CWE-122 CVE-2026-69449: Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locall Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

CVE-2026-71339 [MEDIUM] CWE-122 CVE-2026-71339: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-97833 [MEDIUM] CWE-125 CVE-2026-97833: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97832 [MEDIUM] CWE-125 CVE-2026-97832: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97834 [MEDIUM] CWE-125 CVE-2026-97834: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-62801 [MEDIUM] CWE-22 CVE-2026-62801: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-32151 [MEDIUM] CWE-200 CVE-2026-32151: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

CVE-2020-1287 [HIGH] CVE-2020-1287: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles obj An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1294.

CVE-2020-1291 [HIGH] CVE-2020-1291: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.

CVE-2020-1314 [HIGH] CVE-2020-1314: An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

CVE-2020-1478 [HIGH] CWE-787 CVE-2020-1478: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincin

CVE-2021-43236 [HIGH] CVE-2021-43236: Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2021-43222 [HIGH] CVE-2021-43222: Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2021-40476 [HIGH] CWE-522 CVE-2021-40476: Windows AppContainer Elevation Of Privilege Vulnerability Windows AppContainer Elevation Of Privilege Vulnerability

CVE-2017-11816 [MEDIUM] CWE-200 CVE-2017-11816: The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka "Windows GDI Inf