Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 R2

Is your version affected?

CVE Summary Score Published
CVE-2026-69311 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69334 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-69290 Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69291 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-69287 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69309 Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-72966 Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering… 5.5 Medium Sep 8, 2026
CVE-2026-72967 Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-72954 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-72959 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Sep 8, 2026
CVE-2026-72957 Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-72950 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Sep 8, 2026
CVE-2026-72942 Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-72933 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-72932 Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a… 7.5 High Sep 8, 2026
CVE-2026-72931 Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an… 4.7 Medium Sep 8, 2026
CVE-2026-71352 Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to… 8.8 High Sep 8, 2026
CVE-2026-72927 Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally 6.7 Medium Sep 8, 2026
CVE-2026-71342 Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-71349 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical… 6.8 Medium Sep 8, 2026
CVE-2026-70568 Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-70565 Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70574 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69813 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-69786 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026

Other Microsoft products