Microsoft Windows Server 2012 vulnerabilities

CVE-2026-62762 [MEDIUM] CWE-476 CVE-2026-62762: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-50366 [MEDIUM] CWE-476 CVE-2026-50366: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-57976 [MEDIUM] CWE-476 CVE-2026-57976: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2025-62473 [MEDIUM] CWE-126 CVE-2025-62473: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2019-0811 [HIGH] CWE-19 CVE-2019-0811: A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.

CVE-2026-102199 [MEDIUM] CWE-121 CVE-2026-102199: Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

CVE-2026-78453 [MEDIUM] CWE-191 CVE-2026-78453: Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unautho Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-61921 [MEDIUM] CWE-125 CVE-2026-61921: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-55003 [MEDIUM] CWE-908 CVE-2026-55003: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-50376 [MEDIUM] CWE-908 CVE-2026-50376: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58546 [MEDIUM] CWE-908 CVE-2026-58546: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-69635 [MEDIUM] CWE-122 CVE-2026-69635: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

CVE-2024-21433 [HIGH] CWE-367 CVE-2024-21433: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2019-0758 [MEDIUM] CVE-2019-0758: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0882, CVE-2019-0961.

CVE-2022-34724 [HIGH] CVE-2022-34724: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability

CVE-2026-69878 [MEDIUM] CWE-122 CVE-2026-69878: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code loca Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.

CVE-2022-34701 [HIGH] CWE-400 CVE-2022-34701: Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVE-2025-21230 [HIGH] CWE-20 CVE-2025-21230: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-38126 [HIGH] CWE-476 CVE-2024-38126: Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2025-21251 [HIGH] CWE-400 CVE-2025-21251: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability