Skip to content

Known vulnerabilities in Microsoft Windows Server 2012

Is your version affected?

CVE Summary Score Published
CVE-2026-47291 Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-47288 Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent… 7.1 High Jun 9, 2026
CVE-2026-47289 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Jun 9, 2026
CVE-2026-45656 Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally 7.8 High Jun 9, 2026
CVE-2026-45655 Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a… 5.3 Medium Jun 9, 2026
CVE-2026-45642 Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an… 3.9 Low Jun 9, 2026
CVE-2026-45634 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally 5.5 Medium Jun 9, 2026
CVE-2026-45606 Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally 5.5 Medium Jun 9, 2026
CVE-2026-45639 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network 7.5 High Jun 9, 2026
CVE-2026-34335 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Jun 9, 2026
CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-41108 Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally 7.0 High Jun 9, 2026
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability 7.4 High May 12, 2026
CVE-2026-40403 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally 8.8 High May 12, 2026
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability 7.1 High May 12, 2026
CVE-2026-40398 Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-32209 Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature… 4.4 Medium May 12, 2026
CVE-2026-40397 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High May 12, 2026
CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34341 Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-34338 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34334 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.8 High May 12, 2026
CVE-2026-33838 Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-33837 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026

Other Microsoft products