Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 R2 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-83703 Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network 6.5 Medium Oct 13, 2026
CVE-2026-83686 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83695 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-83714 Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83665 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83668 Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83680 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83670 Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information… 7.5 High Oct 13, 2026
CVE-2026-83682 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83683 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information… 6.5 Medium Oct 13, 2026
CVE-2026-83672 Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized… 4.7 Medium Oct 13, 2026
CVE-2026-83640 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-83651 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-83643 Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83637 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83645 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an… 7.5 High Oct 13, 2026
CVE-2026-83638 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83647 Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83659 Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized… 7.8 High Oct 13, 2026
CVE-2026-83664 Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an… 5.5 Medium Oct 13, 2026
CVE-2026-83573 Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges… 6.8 Medium Oct 13, 2026
CVE-2026-83574 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83585 Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83579 Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83567 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026

Other Microsoft products