Skip to content

Known vulnerabilities in Microsoft Windows Server 2012

Is your version affected?

CVE Summary Score Published
CVE-2026-83755 Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83718 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83728 Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform… 8.8 High Oct 13, 2026
CVE-2026-83724 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-83725 Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over… 8.8 High Oct 13, 2026
CVE-2026-83717 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83689 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83698 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-83702 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83685 Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-83703 Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network 6.5 Medium Oct 13, 2026
CVE-2026-83686 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83695 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-83714 Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83665 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83668 Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83680 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83670 Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information… 7.5 High Oct 13, 2026
CVE-2026-83682 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83683 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information… 6.5 Medium Oct 13, 2026
CVE-2026-83672 Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized… 4.7 Medium Oct 13, 2026
CVE-2026-83640 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-83651 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-83643 Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83637 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026

Other Microsoft products