Microsoft Windows Server 2012 vulnerabilities
5,227 known vulnerabilities affecting microsoft/windows_server_2012.
Total CVEs
5,227
CISA KEV
153
actively exploited
Public exploits
333
Exploited in wild
212
Severity breakdown
CRITICAL254HIGH3502MEDIUM1416LOW55
Vulnerabilities
Page 77 of 262
CVE-2026-96312P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96856P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96217P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85869P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85869 [HIGH] CWE-122 CVE-2026-85869: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85871P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-85871 [HIGH] CWE-122 CVE-2026-85871: Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26180P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.260262026-04-14
CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58726P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.257222025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-20849P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.258682026-01-13
CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26158P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.248212024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2026-87711P3HIGHCVSS 7.8vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-24533P3HIGHCVSS 8.0vr2≥ 6.2.9200.0, < 6.2.9200.236792022-04-15
CVE-2022-24533 [HIGH] CVE-2022-24533: Remote Desktop Protocol Remote Code Execution Vulnerability
Remote Desktop Protocol Remote Code Execution Vulnerability
nvd
CVE-2026-70095P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69991P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69987P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69994P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69984P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69995P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69995 [HIGH] CWE-416 CVE-2026-69995: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69998P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69998 [HIGH] CWE-416 CVE-2026-69998: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69988P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-69988 [HIGH] CWE-416 CVE-2026-69988: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70006P3HIGHCVSS 7.5vr2≥ 6.2.9200.0, < 6.2.9200.264342026-10-13
CVE-2026-70006 [HIGH] CWE-416 CVE-2026-70006: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd