Windows Server 2012 (Server Core installation) vulnerabilities

230 known vulnerabilities in Windows Server 2012 (Server Core installation) from Microsoft. 214 are rated high or critical, and 83 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-119865Nov 10, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-105545Nov 10, 2026Microsoft

  An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-96911Oct 13, 2026Microsoft

  Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

• 9.1 Critical severity

  Windows 10 Version 1607: Improper Verification of Cryptographic Signature

  CVE-2026-96252Oct 13, 2026Microsoft

  Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-88174Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-88096Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

• 7.4 High severity

  Windows 10 Version 1607: Improper Verification of Source of a Communication Channel

  CVE-2026-87705Oct 13, 2026Microsoft

  Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

• 7.0 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-85943Oct 13, 2026Microsoft

  Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-85941Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-85904Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2026-85355Oct 13, 2026Microsoft

  Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-85333Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-85329Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Memory Allocation with Excessive Size Value

  CVE-2026-85324Oct 13, 2026Microsoft

  Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

• 7.5 High severity

  Windows 10 Version 1607: Use of Uninitialized Resource

  CVE-2026-85322Oct 13, 2026MicrosoftEPSS 1.03%

  Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

• 7.5 High severity

  Windows 10 Version 1607: Allocation of Resources Without Limits or Throttling

  CVE-2026-85319Oct 13, 2026MicrosoftEPSS 1.08%

  Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

• 7.0 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-83775Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-83704Oct 13, 2026Microsoft

  Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-83666Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-83659Oct 13, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Allocation of Resources Without Limits or Throttling

  CVE-2026-83645Oct 13, 2026MicrosoftEPSS 1.22%

  Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-81971Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Access of Resource Using Incompatible Type

  CVE-2026-70245Oct 13, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Access of Resource Using Incompatible Type

  CVE-2026-70225Oct 13, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Access of Resource Using Incompatible Type

  CVE-2026-70205Oct 13, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-70149Oct 13, 2026Microsoft

  Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69830Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69736Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Out-of-bounds Read

  CVE-2026-105007Oct 13, 2026Microsoft

  An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could r

• 7.8 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-103568Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Access of Resource Using Incompatible Type

  CVE-2026-102216Oct 13, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Microsoft Windows Heap-Based Buffer Overflow Exploited

  CVE-2026-85880Sep 8, 2026Microsoft

  Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-77894Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Allocation of Resources Without Limits or Throttling

  CVE-2026-72978Sep 8, 2026Microsoft

  Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

• 7.5 High severity

  Windows 10 Version 1607: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2026-71330Sep 8, 2026MicrosoftEPSS 1.03%

  Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

• 7.0 High severity

  Windows 10 Version 1607: Integer Underflow (Wrap or Wraparound)

  CVE-2026-69859Sep 8, 2026Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69827Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69782Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

• 7.8 High severity

  Windows 10 Version 1607: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-69445Sep 8, 2026Microsoft

  Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69441Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.