Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2012 R2 (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-23669 Use after free in RPC Runtime allows an authorized attacker to execute code over a network 8.8 Élevée 10 mars 2026
CVE-2026-23668 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics… 7.0 Élevée 10 mars 2026
CVE-2026-20846 Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network 7.5 Élevée 10 févr. 2026
CVE-2026-21222 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Moyenne 10 févr. 2026
CVE-2026-21231 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows… 7.8 Élevée 10 févr. 2026
CVE-2026-21238 Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 Élevée 10 févr. 2026
CVE-2026-21239 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 févr. 2026
CVE-2026-21249 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally 3.3 Faible 10 févr. 2026
CVE-2026-21253 Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally 7.0 Élevée 10 févr. 2026
CVE-2026-21508 Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally 7.0 Élevée 10 févr. 2026
CVE-2026-21525 Exploitée Microsoft Windows NULL Pointer Dereference Vulnerability 6.2 Moyenne 10 févr. 2026
CVE-2026-21510 Exploitée Microsoft Windows Shell Protection Mechanism Failure Vulnerability 8.8 Élevée 10 févr. 2026
CVE-2026-21513 Exploitée Microsoft Internet Explorer Protection Mechanism Failure Vulnerability 8.8 Élevée 10 févr. 2026
CVE-2026-21533 Exploitée Microsoft Windows Improper Privilege Management Vulnerability 7.8 Élevée 10 févr. 2026
CVE-2026-21236 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 Élevée 10 févr. 2026
CVE-2026-21235 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.3 Élevée 10 févr. 2026
CVE-2026-21246 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 févr. 2026
CVE-2026-20936 Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack 4.3 Moyenne 13 janv. 2026
CVE-2026-20931 External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges… 8.0 Élevée 13 janv. 2026
CVE-2026-20929 Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network 7.5 Élevée 13 janv. 2026
CVE-2026-20872 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network 6.5 Moyenne 13 janv. 2026
CVE-2026-20868 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 13 janv. 2026
CVE-2026-20849 Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate… 7.5 Élevée 13 janv. 2026
CVE-2026-20848 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows… 7.5 Élevée 13 janv. 2026
CVE-2026-20843 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate… 7.8 Élevée 13 janv. 2026

Autres produits Microsoft