Microsoft Windows Server 2012 R2 vulnerabilities

CVE-2026-62890 [HIGH] CWE-122 CVE-2026-62890: Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

CVE-2026-50309 [HIGH] CWE-122 CVE-2026-50309: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-54987 [HIGH] CWE-122 CVE-2026-54987: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-50494 [HIGH] CWE-122 CVE-2026-50494: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-50480 [HIGH] CWE-122 CVE-2026-50480: Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

CVE-2026-50417 [HIGH] CWE-20 CVE-2026-50417: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83919 [HIGH] CWE-122 CVE-2026-83919: Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to exec Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

CVE-2026-85341 [HIGH] CWE-122 CVE-2026-85341: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85318 [HIGH] CWE-122 CVE-2026-85318: Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-40377 [HIGH] CWE-122 CVE-2026-40377: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevat Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-70278 [HIGH] CWE-122 CVE-2026-70278: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364 [HIGH] CWE-306 CVE-2026-61364: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-42976 [HIGH] CWE-306 CVE-2026-42976: Missing authentication for critical function in Windows RPC API allows an authorized attacker to ele Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

CVE-2026-61367 [HIGH] CWE-306 CVE-2026-61367: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-45638 [HIGH] CWE-122 CVE-2026-45638: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.