Microsoft Windows Server 2012 vulnerabilities

CVE-2023-36005 [HIGH] CWE-591 CVE-2023-36005: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2018-8494 [HIGH] CWE-611 CVE-2018-8494: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Win

CVE-2018-8225 [HIGH] CVE-2018-8225: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi

CVE-2020-0883 [HIGH] CVE-2020-0883: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface ( A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.

CVE-2017-0214 [HIGH] CVE-2017-0214: Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when Windows fails to properly validate input before loading type libraries, aka "Windows COM Elevation of Privilege V

CVE-2026-57092 [CRITICAL] CWE-416 CVE-2026-57092: Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a networ Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.

CVE-2026-83770 [CRITICAL] CWE-122 CVE-2026-83770: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-70147 [CRITICAL] CWE-122 CVE-2026-70147: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70153 [CRITICAL] CWE-122 CVE-2026-70153: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-97814 [CRITICAL] CWE-122 CVE-2026-97814: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-70096 [CRITICAL] CWE-122 CVE-2026-70096: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70157 [CRITICAL] CWE-122 CVE-2026-70157: Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

CVE-2026-96320 [CRITICAL] CWE-122 CVE-2026-96320: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96924 [CRITICAL] CWE-822 CVE-2026-96924: Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

CVE-2026-83888 [CRITICAL] CWE-126 CVE-2026-83888: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69769 [CRITICAL] CWE-122 CVE-2026-69769: Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

CVE-2026-69525 [CRITICAL] CWE-416 CVE-2026-69525: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-72979 [CRITICAL] CWE-416 CVE-2026-72979: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69579 [CRITICAL] CWE-416 CVE-2026-69579: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-69431 [CRITICAL] CWE-122 CVE-2026-69431: Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.