Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 R2 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34341 Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-34338 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34334 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.8 High May 12, 2026
CVE-2026-33838 Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-33837 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-42825 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-32170 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally 6.7 Medium May 12, 2026
CVE-2026-32161 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi… 7.5 High May 12, 2026
CVE-2026-41095 Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-41089 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical May 12, 2026
CVE-2026-40414 Windows TCP/IP Denial of Service Vulnerability 7.4 High May 12, 2026
CVE-2026-40408 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-40410 Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-40406 Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network 7.5 High May 12, 2026
CVE-2026-40407 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High May 12, 2026
CVE-2026-40380 Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a… 6.2 Medium May 12, 2026
CVE-2026-40377 Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-35423 Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network 5.4 Medium May 12, 2026
CVE-2026-35424 Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an… 7.5 High May 12, 2026
CVE-2026-35421 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally 7.8 High May 12, 2026
CVE-2026-35422 Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a… 6.5 Medium May 12, 2026
CVE-2026-35420 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-35415 Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate… 7.8 High May 12, 2026
CVE-2026-35416 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.0 High May 12, 2026

Other Microsoft products