CVE-2026-628939.8CriticalCWE-416
CVE-2026-62893: Microsoft Windows Server 2012 vulnerability
Microsoft · Windows Server 2012
Vendor fix available · Affected: Microsoft Windows Server 2012 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
1.0%probability of exploitation in the next 30 days
62nd percentile
050100
Higher than 62% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: Malwarebytes, 12 Aug.
Quiet for 9 weekslast report 9 Sep2 articles2 outlets
- Wed 12 Aug, 14:11 UTC. Malwarebytes, first report. MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited.
- Wed 9 Sep, 10:00 UTC. Infosecurity, its first report on the story. Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 12 Aug 14:11 | Malwarebytes | MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited |
| 9 Sep 10:00 | Infosecurity | Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days |
- Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-DaysInfosecurity · mentions it in passing
- MS Patch Tuesday patches 421 flaws, Lazarus zero day exploitedMalwarebytes · first in our coverage
New articles also arrive in the RSS feed.