Microsoft Windows Server 2012 vulnerabilities, page 5

5,280 vulnerabilities

Known vulnerabilities in Microsoft Windows Server 2012, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2026-96308microsoftwindows_10_1607+28
EPSS score
0.31%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7CVE-2026-96307microsoftwindows_10_1607+28
EPSS score
0.20%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7CVE-2026-96305microsoftwindows_10_1607+28
EPSS score
0.25%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7CVE-2026-96302microsoftwindows_10_1607+28
EPSS score
0.25%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
5.9CVE-2026-96300microsoftwindows_10_1607+28
EPSS score
0.82%
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
9.1CVE-2026-96252microsoftwindows_10_1607+14
EPSS score
0.47%
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
5.5CVE-2026-96247microsoftwindows_10_1607+27
EPSS score
0.39%
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
7.5CVE-2026-96246microsoftwindows_10_1607+28
EPSS score
0.98%
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
7.5CVE-2026-96245microsoftwindows_10_1607+28
EPSS score
0.98%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
7.4CVE-2026-96222chainguarddotnet-8-sdk+36
EPSS score
0.57%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
7.8CVE-2026-96217microsoftwindows_10_1607+28
EPSS score
0.31%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
7CVE-2026-96209microsoftwindows_10_1607+28
EPSS score
0.25%
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
7.8CVE-2026-96186microsoftwindows_10_1607+28
EPSS score
2.27%
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
7.8CVE-2026-96118microsoftwindows_10_1607+28
EPSS score
0.31%
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
9.8CVE-2026-96113microsoftwindows_10_1607+14
EPSS score
0.66%
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
9.8CVE-2026-96096microsoftwindows_10_1607+28
EPSS score
0.66%
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
7.5CVE-2026-96071microsoftwindows_10_1607+28
EPSS score
0.56%
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
5.5CVE-2026-95904microsoftwindows_10_1607+28
EPSS score
0.30%
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
4.6CVE-2026-88226microsoftwindows_10_1607+28
EPSS score
0.45%
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
8.8CVE-2026-88219microsoftwindows_10_1607+28
EPSS score
0.75%
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.