Windows Server 2012
by Microsoft
CVEs (3,338)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2012-1528 | 0.01 | — | 0.18 | Nov 14, 2012 | Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase,… | |||
| CVE-2012-1527 | 0.01 | — | 0.18 | Nov 14, 2012 | Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase,… | |||
| CVE-2026-23674 | 0.00 | — | 0.01 | Mar 10, 2026 | Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. | |||
| CVE-2026-26111 | 0.00 | — | 0.01 | Mar 10, 2026 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. | |||
| CVE-2026-25190 | 0.00 | — | 0.01 | Mar 10, 2026 | Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally. | |||
| CVE-2026-25188 | 0.00 | — | 0.01 | Mar 10, 2026 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network. | |||
| CVE-2026-25186 | 0.00 | — | 0.01 | Mar 10, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally. | |||
| CVE-2026-25185 | 0.00 | — | 0.01 | Mar 10, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network. | |||
| CVE-2026-25181 | 0.00 | — | 0.01 | Mar 10, 2026 | Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2026-25179 | 0.00 | — | 0.00 | Mar 10, 2026 | Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25178 | 0.00 | — | 0.00 | Mar 10, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25177 | 0.00 | — | 0.01 | Mar 10, 2026 | Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network. | |||
| CVE-2026-25176 | 0.00 | — | 0.00 | Mar 10, 2026 | Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25175 | 0.00 | — | 0.00 | Mar 10, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25174 | 0.00 | — | 0.00 | Mar 10, 2026 | Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25173 | 0.00 | — | 0.01 | Mar 10, 2026 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. | |||
| CVE-2026-25172 | 0.00 | — | 0.01 | Mar 10, 2026 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. | |||
| CVE-2026-25171 | 0.00 | — | 0.00 | Mar 10, 2026 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. | |||
| CVE-2026-25169 | 0.00 | — | 0.00 | Mar 10, 2026 | Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. | |||
| CVE-2026-25168 | 0.00 | — | 0.00 | Mar 10, 2026 | Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. |
- CVE-2012-1528Nov 14, 2012risk 0.01cvss —epss 0.18
Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase,…
- CVE-2012-1527Nov 14, 2012risk 0.01cvss —epss 0.18
Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase,…
- CVE-2026-23674Mar 10, 2026risk 0.00cvss —epss 0.01
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-26111Mar 10, 2026risk 0.00cvss —epss 0.01
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
- CVE-2026-25190Mar 10, 2026risk 0.00cvss —epss 0.01
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally.
- CVE-2026-25188Mar 10, 2026risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2026-25186Mar 10, 2026risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally.
- CVE-2026-25185Mar 10, 2026risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-25181Mar 10, 2026risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.
- CVE-2026-25179Mar 10, 2026risk 0.00cvss —epss 0.00
Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2026-25178Mar 10, 2026risk 0.00cvss —epss 0.00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2026-25177Mar 10, 2026risk 0.00cvss —epss 0.01
Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
- CVE-2026-25176Mar 10, 2026risk 0.00cvss —epss 0.00
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2026-25175Mar 10, 2026risk 0.00cvss —epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-25174Mar 10, 2026risk 0.00cvss —epss 0.00
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
- CVE-2026-25173Mar 10, 2026risk 0.00cvss —epss 0.01
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
- CVE-2026-25172Mar 10, 2026risk 0.00cvss —epss 0.01
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
- CVE-2026-25171Mar 10, 2026risk 0.00cvss —epss 0.00
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
- CVE-2026-25169Mar 10, 2026risk 0.00cvss —epss 0.00
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
- CVE-2026-25168Mar 10, 2026risk 0.00cvss —epss 0.00
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
Page 125 of 167