Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-85928 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-70277 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83888 Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network 6.5 Medium Oct 13, 2026
CVE-2026-85329 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account… 7.0 High Oct 13, 2026
CVE-2026-85904 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device… 7.0 High Oct 13, 2026
CVE-2026-85926 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a… 8.1 High Oct 13, 2026
CVE-2026-70170 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-70172 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70244 Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-70210 Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network 8.8 High Oct 13, 2026
CVE-2026-70164 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70185 Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally 8.8 High Oct 13, 2026
CVE-2026-70187 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-70238 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70262 Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network 8.8 High Oct 13, 2026
CVE-2026-69916 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70041 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-88165 Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88159 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.8 High Oct 13, 2026
CVE-2026-88173 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.1 High Oct 13, 2026
CVE-2026-87711 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85927 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-88096 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server… 7.0 High Oct 13, 2026

Other Microsoft products