microsoft / windows_server_2012
977 known vulnerabilities in microsoft windows_server_2012.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-73009 | Medium | 0.9% | 9.8 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau… | |
| CVE-2024-38245 | Medium | 0.9% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2021-26898 | Medium | 0.9% | 7.8 | Windows Event Tracing Elevation of Privilege Vulnerability | |
| CVE-2026-42908 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-45639 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-83989 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unaut… | |
| CVE-2026-40400 | Medium | 0.9% | 8.0 | Relative path traversal in Windows PowerShell allows an authorized attacker to e… | |
| CVE-2021-26875 | Medium | 0.9% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2026-20931 | Medium | 0.9% | 8.0 | External control of file name or path in Windows Telephony Service allows an aut… | |
| CVE-2024-21406 | Medium | 0.9% | 7.5 | Windows Printing Service Spoofing Vulnerability | |
| CVE-2026-77499 | Medium | 0.9% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-77890 | Medium | 0.9% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-71336 | Medium | 0.9% | 8.8 | Integer overflow or wraparound in Windows Work Folder Service allows an authoriz… | |
| CVE-2026-77888 | Medium | 0.9% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-77889 | Medium | 0.9% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-70563 | Medium | 0.8% | 8.1 | Improper link resolution before file access ('link following') in Windows Shell … | |
| CVE-2021-26878 | Medium | 0.8% | 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability | |
| CVE-2026-70342 | Medium | 0.8% | 8.1 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauth… | |
| CVE-2026-50527 | Medium | 0.8% | 7.5 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to… | |
| CVE-2026-50648 | Medium | 0.8% | 7.5 | Allocation of resources without limits or throttling in .NET Framework allows an… | |
| CVE-2026-33827 | Medium | 0.8% | 8.1 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-62785 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protoc… | |
| CVE-2020-1078 | Medium | 0.8% | 7.8 | An elevation of privilege vulnerability exists in Windows Installer because of t… | |
| CVE-2026-49179 | Medium | 0.8% | 8.8 | Improper neutralization of special elements used in a command ('command injectio… | |
| CVE-2026-50380 | Medium | 0.8% | 9.6 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to ex… | |
| CVE-2026-50474 | Medium | 0.8% | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… | |
| CVE-2026-57090 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut… | |
| CVE-2026-58594 | Medium | 0.8% | 8.8 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to… | |
| CVE-2026-69669 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to … | |
| CVE-2026-77501 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-68887 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthoriz… | |
| CVE-2026-77498 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-77502 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-77886 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-77893 | Medium | 0.8% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-20919 | Medium | 0.8% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-20926 | Medium | 0.8% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-69518 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized atta… | |
| CVE-2026-70203 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attack… | |
| CVE-2026-69860 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-70586 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to e… | |
| CVE-2024-21363 | Medium | 0.8% | 7.8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | |
| CVE-2026-49164 | Medium | 0.8% | 8.1 | Heap-based buffer overflow in Active Directory Domain Services allows an unautho… | |
| CVE-2026-50439 | Medium | 0.8% | 8.1 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized… | |
| CVE-2026-50694 | Medium | 0.8% | 8.1 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau… | |
| CVE-2026-57087 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut… | |
| CVE-2023-21817 | Medium | 0.8% | 7.8 | Windows Kerberos Elevation of Privilege Vulnerability | |
| CVE-2026-50444 | Medium | 0.8% | 8.8 | Missing authentication for critical function in Windows Server Update Service al… | |
| CVE-2026-68839 | Medium | 0.8% | 9.8 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an un… | |
| CVE-2026-70587 | Medium | 0.8% | 7.5 | Improper null termination in Windows Remote Desktop Protocol allows an unauthori… |