Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 R2

Is your version affected?

CVE Summary Score Published
CVE-2026-83705 Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-83688 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83667 Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-83678 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83650 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83642 Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute… 8.8 High Oct 13, 2026
CVE-2026-83666 Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory… 7.0 High Oct 13, 2026
CVE-2026-83652 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83655 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83510 Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to… 7.0 High Oct 13, 2026
CVE-2026-83499 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-83571 Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83521 Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-83575 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83515 Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-83578 Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-83641 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83580 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate… 7.0 High Oct 13, 2026
CVE-2026-83635 Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83584 Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69650 Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-69830 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server… 8.1 High Oct 13, 2026
CVE-2026-81969 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-69387 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69721 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026

Other Microsoft products