Microsoft Windows Server 2012 vulnerabilities

CVE-2026-68880 [HIGH] CWE-122 CVE-2026-68880: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ove Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-68878 [HIGH] CWE-121 CVE-2026-68878: Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate priv Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69481 [HIGH] CWE-122 CVE-2026-69481: Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to ele Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-69301 [HIGH] CWE-121 CVE-2026-69301: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69418 [HIGH] CWE-122 CVE-2026-69418: Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privile Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-61352 [HIGH] CWE-362 CVE-2026-61352: Concurrent execution using shared resource with improper synchronization ('race condition') in Remot Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2017-0259 [MEDIUM] CVE-2017-0259: The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220,

CVE-2021-42291 [HIGH] CWE-269 CVE-2021-42291: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2024-43455 [CRITICAL] CWE-20 CVE-2024-43455: Windows Remote Desktop Licensing Service Spoofing Vulnerability Windows Remote Desktop Licensing Service Spoofing Vulnerability

CVE-2021-42282 [HIGH] CWE-269 CVE-2021-42282: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability Windows Workstation Service Elevation of Privilege Vulnerability

CVE-2020-1285 [HIGH] CVE-2020-1285: <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interfac A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users who

CVE-2017-0292 [HIGH] CVE-2017-0292: Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291.

CVE-2022-22029 [HIGH] CVE-2022-22029: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability

CVE-2019-0856 [HIGH] CVE-2019-0856: A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.

CVE-2022-33679 [HIGH] CVE-2022-33679: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

CVE-2022-24541 [HIGH] CVE-2022-24541: Windows Server Service Remote Code Execution Vulnerability Windows Server Service Remote Code Execution Vulnerability

CVE-2016-0088 [CRITICAL] CWE-284 CVE-2016-0088: Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS us Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."

CVE-2018-8136 [HIGH] CVE-2018-8136: A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

CVE-2018-1003 [HIGH] CWE-119 CVE-2018-1003: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windo