Microsoft Windows Server 2012 vulnerabilities, page 3
5,279 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2012, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96933microsoftwindows_10_1607+28
EPSS score0.31%
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.CVE-2026-96931microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96930microsoftwindows_10_1607+28EPSS score0.39%
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.CVE-2026-96929microsoftwindows 10 version 1607+19EPSS score0.36%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-96928microsoftwindows_10_1607+28EPSS score0.31%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96927microsoftwindows_10_1607+28EPSS score0.30%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96926microsoftwindows_10_1607+14EPSS score0.28%
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.CVE-2026-96925microsoftwindows_10_1607+28EPSS score0.39%
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96924microsoftwindows_10_1607+28EPSS score0.87%
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.CVE-2026-96923microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.CVE-2026-96921microsoftwindows_10_1607+28EPSS score0.39%
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.CVE-2026-96916microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96915microsoftwindows_10_1607+28EPSS score0.24%
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-96911microsoftwindows 10 version 1607+19EPSS score0.40%
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-96910microsoftwindows 10 version 1607+19EPSS score0.40%
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.CVE-2026-96867microsoftwindows 10 version 1607+19EPSS score0.32%
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.CVE-2026-96866microsoftwindows 10 version 1607+12EPSS score1.15%
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.CVE-2026-96864microsoftwindows 10 version 1607+12EPSS score0.65%
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.CVE-2026-96862microsoftwindows 10 version 1607+19EPSS score0.32%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-96861microsoftwindows 10 version 1607+12EPSS score1.15%
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.