Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-68835 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026
CVE-2026-68841 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-68832 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-68833 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack 6.8 Medium Sep 8, 2026
CVE-2026-68830 Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host… 5.5 Medium Sep 8, 2026
CVE-2026-50349 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary… 7.0 High Sep 8, 2026
CVE-2026-62801 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an… 6.5 Medium Sep 8, 2026
CVE-2026-85360 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69782 Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an… 8.1 High Sep 8, 2026
CVE-2026-70091 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an… 5.9 Medium Sep 8, 2026
CVE-2026-69341 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-62694 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-62706 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-62727 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service… 7.0 High Aug 19, 2026
CVE-2026-62738 Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-65796 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a… 8.1 High Aug 11, 2026
CVE-2026-65798 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Medium Aug 11, 2026
CVE-2026-65797 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Medium Aug 11, 2026
CVE-2026-65799 Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Medium Aug 11, 2026
CVE-2026-65794 Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network 6.5 Medium Aug 11, 2026
CVE-2026-65791 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a… 9.8 Critical Aug 11, 2026
CVE-2026-65790 Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-65775 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-65774 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-65679 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a… 8.1 High Aug 11, 2026

Other Microsoft products