Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-77505 Use after free in DNS Server allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-77887 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally 6.4 Medium Sep 8, 2026
CVE-2026-77504 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-77502 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77503 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 8.4 High Sep 8, 2026
CVE-2026-77499 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77501 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77498 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77493 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-77494 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77492 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-77491 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72986 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-72981 Use after free in IP Helper allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-77495 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-72979 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72978 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an… 5.9 Medium Sep 8, 2026
CVE-2026-70283 Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70124 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69929 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69930 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69603 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Sep 8, 2026

Other Microsoft products