Microsoft Windows Server 2012 vulnerabilities
3,709 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
3,709
CISA KEV
148
actively exploited
Public exploits
269
Exploited in wild
142
Severity breakdown
CRITICAL157HIGH2452MEDIUM1048LOW52
Vulnerabilities
Page 2 of 186
CVE-2026-26168HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26168 [HIGH] CWE-362 CVE-2026-26168: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32157HIGHCVSS 8.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32157 [HIGH] CWE-416 CVE-2026-32157: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
cvelistv5nvd
CVE-2026-26176HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26176 [HIGH] CWE-122 CVE-2026-26176: Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized atta
Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27929HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27929 [HIGH] CWE-367 CVE-2026-27929: Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27912HIGHCVSS 8.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27912 [HIGH] CWE-285 CVE-2026-27912: Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.
cvelistv5nvd
CVE-2026-26160HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26160 [HIGH] CWE-306 CVE-2026-26160: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32073HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32073 [HIGH] CWE-416 CVE-2026-32073: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26173HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26173 [HIGH] CWE-362 CVE-2026-26173: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32225HIGHCVSS 8.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32225 [HIGH] CWE-693 CVE-2026-32225: Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security f
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
cvelistv5nvd
CVE-2026-27921HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27921 [HIGH] CWE-362 CVE-2026-27921: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27923HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27923 [HIGH] CWE-416 CVE-2026-27923: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-33104HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-33104 [HIGH] CWE-362 CVE-2026-33104: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26151HIGHCVSS 7.1≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26151 [HIGH] CWE-357 CVE-2026-26151: Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized att
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.
cvelistv5nvd
CVE-2026-27916HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27916 [HIGH] CWE-416 CVE-2026-27916: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26162HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26162 [HIGH] CWE-843 CVE-2026-26162: Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized at
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32075HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32075 [HIGH] CWE-416 CVE-2026-32075: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32093HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-32093 [HIGH] CWE-122 CVE-2026-32093: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26180HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26174HIGHCVSS 7.0≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26174 [HIGH] CWE-362 CVE-2026-26174: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27920HIGHCVSS 7.8≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-27920 [HIGH] CWE-822 CVE-2026-27920: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
cvelistv5nvd