Microsoft » Windows Server 2012 : Security Vulnerabilities, CVEs, CVSS score between 4 and 4.99

Windows Authentication Elevation of Privilege Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Themes Information Disclosure Vulnerability

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

Active Directory Domain Services Information Disclosure Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Windows Event Logging Service Denial of Service Vulnerability

BitLocker Security Feature Bypass Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.

An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session, aka 'Windows Information Disclosure Vulnerability'.

An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.