CVE-2026-78445 – Microsoft Windows Server 2012
“Four memory flaws, one server, one path from remote code to full control. Patch it before someone else takes it.”
This Windows Server 2012 update fixes four use-after-free vulnerabilities (CWE-416). Each one enables remote code execution and elevation of privilege, so an attacker can run code on the server and take over the system. CVE-2026-69595 has a CVSS score of 9.8, Critical severity. CVE-2026-78445 has a CVSS score of 9.8, Critical severity. CVE-2026-69712 has a CVSS score of 8.8, High severity. CVE-2026-70585 has a CVSS score of 7.0, High severity.
Two Critical and two High severity flaws in the same server platform make this a same-day priority. Each server that stays unpatched is an easy way for an attacker to move deeper into the network.
Key Details
- Affected Product
- Microsoft Windows Server 2012
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-416