Microsoft Windows Server 2012 R2 vulnerabilities

CVE-2026-88112 [HIGH] CWE-822 CVE-2026-88112: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-85903 [HIGH] CWE-822 CVE-2026-85903: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83929 [HIGH] CWE-787 CVE-2026-83929: Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-62816 [HIGH] CWE-122 CVE-2026-62816: Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-54982 [HIGH] CWE-191 CVE-2026-54982: Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-50370 [HIGH] CWE-20 CVE-2026-50370: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-34329 [HIGH] CWE-122 CVE-2026-34329: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-40403 [HIGH] CWE-122 CVE-2026-40403: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code lo Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

CVE-2026-54999 [HIGH] CWE-362 CVE-2026-54999: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-85905 [HIGH] CWE-122 CVE-2026-85905: Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-69603 [HIGH] CWE-122 CVE-2026-69603: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2018-8423 [HIGH] CWE-119 CVE-2018-8423: A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JE A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Wi

CVE-2026-70229 [HIGH] CWE-863 CVE-2026-70229: Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2019-0888 [HIGH] CVE-2019-0888: A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objec A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with the victim user’s privileges. An attacker could craft a website that exploits the vulnerability and then convince a victim user to visit the website. The secu

CVE-2026-83914 [HIGH] CWE-416 CVE-2026-83914: Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVE-2026-100218 [HIGH] CWE-416 CVE-2026-100218: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-70187 [HIGH] CWE-416 CVE-2026-70187: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-78449 [HIGH] CWE-416 CVE-2026-78449: Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-77505 [HIGH] CWE-416 CVE-2026-77505: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-72981 [HIGH] CWE-416 CVE-2026-72981: Use after free in IP Helper allows an unauthorized attacker to execute code over a network. Use after free in IP Helper allows an unauthorized attacker to execute code over a network.