Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 R2

Is your version affected?

CVE Summary Score Published
CVE-2026-69852 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 7.5 High Sep 8, 2026
CVE-2026-69769 Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69829 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69845 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69876 Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network 8.0 High Sep 8, 2026
CVE-2026-69807 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an… 8.0 High Sep 8, 2026
CVE-2026-69824 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over… 9.8 Critical Sep 8, 2026
CVE-2026-69911 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69847 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network 8.0 High Sep 8, 2026
CVE-2026-69785 Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69878 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally 6.4 Medium Sep 8, 2026
CVE-2026-69761 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026
CVE-2026-69853 Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally 4.7 Medium Sep 8, 2026
CVE-2026-69672 Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69779 Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-69895 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally 4.7 Medium Sep 8, 2026
CVE-2026-69793 Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security… 7.5 High Sep 8, 2026
CVE-2026-69713 Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security… 4.4 Medium Sep 8, 2026
CVE-2026-69768 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69706 Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026
CVE-2026-69731 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69692 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69841 Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69688 Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges… 7.1 High Sep 8, 2026
CVE-2026-69679 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network 5.7 Medium Sep 8, 2026

Other Microsoft products