Microsoft Windows Server 2012 vulnerabilities
5,228 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,228
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1417LOW55
Vulnerabilities
Page 221 of 262
CVE-2026-69967P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69967 [MEDIUM] CWE-125 CVE-2026-69967: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information l
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70292P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70292 [MEDIUM] CWE-125 CVE-2026-70292: Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83733P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83733 [MEDIUM] CWE-125 CVE-2026-83733: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83737P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83737 [MEDIUM] CWE-125 CVE-2026-83737: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70211P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70211 [MEDIUM] CWE-125 CVE-2026-70211: Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83723P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83723 [MEDIUM] CWE-908 CVE-2026-83723: Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83571P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83571 [MEDIUM] CWE-476 CVE-2026-83571: Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose informat
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70295P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70295 [MEDIUM] CWE-125 CVE-2026-70295: Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83686P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-83686 [MEDIUM] CWE-125 CVE-2026-83686: Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70074P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70074 [MEDIUM] CWE-125 CVE-2026-70074: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69721P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69721 [MEDIUM] CWE-125 CVE-2026-69721: Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70294P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70294 [MEDIUM] CWE-20 CVE-2026-70294: Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70208P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70208 [MEDIUM] CWE-125 CVE-2026-70208: Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69318P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69318 [MEDIUM] CWE-125 CVE-2026-69318: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69627P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69627 [MEDIUM] CWE-125 CVE-2026-69627: Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disc
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69527P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69527 [MEDIUM] CWE-125 CVE-2026-69527: Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclos
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70290P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-70290 [MEDIUM] CWE-908 CVE-2026-70290: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68881P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-68881 [MEDIUM] CWE-125 CVE-2026-68881: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69367P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69367 [MEDIUM] CWE-125 CVE-2026-69367: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69672P4MEDIUMCVSS 5.5vr2≥ 6.2.9200.0, < 6.2.9200.263492026-09-08
CVE-2026-69672 [MEDIUM] CWE-908 CVE-2026-69672: Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information l
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
nvd