Detections
Analytics
KB5120385: Windows Server 2012 R2 Security Update (August 2026)
high Nessus Plugin ID 334618
Language:
Synopsis
The remote Windows host is affected by multiple vulnerabilities.Description
The remote Windows host is missing security update 5120385. It is, therefore, affected by multiple vulnerabilities- Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
(CVE-2026-62878)
- Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. (CVE-2026-62893)
- Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. (CVE-2026-65791)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply Security Update 5120385See Also
Plugin Details
Severity: High
ID: 334618
File Name: smb_nt_ms26_aug_5120385.nasl
Version: 1.4
Type: Local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 8/11/2026
Updated: 8/14/2026
Supported Sensors: Continuous Assessment, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.87
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2026-61924
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS Score Source: CVE-2026-61363
Vulnerability Information
CPE: cpe:/o:microsoft:windows_server_2012:r2
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/11/2026
Vulnerability Publication Date: 8/11/2026
CISA Known Exploited Vulnerability Due Dates: 8/25/2026
Reference Information
CVE: CVE-2026-49179, CVE-2026-50472, CVE-2026-54113, CVE-2026-54984, CVE-2026-59122, CVE-2026-59127, CVE-2026-59128, CVE-2026-59132, CVE-2026-59134, CVE-2026-59135, CVE-2026-59136, CVE-2026-59137, CVE-2026-59138, CVE-2026-61345, CVE-2026-61347, CVE-2026-61348, CVE-2026-61350, CVE-2026-61352, CVE-2026-61353, CVE-2026-61360, CVE-2026-61363, CVE-2026-61364, CVE-2026-61365, CVE-2026-61366, CVE-2026-61367, CVE-2026-61918, CVE-2026-61921, CVE-2026-61924, CVE-2026-61925, CVE-2026-61926, CVE-2026-61937, CVE-2026-61939, CVE-2026-62692, CVE-2026-62698, CVE-2026-62699, CVE-2026-62700, CVE-2026-62701, CVE-2026-62709, CVE-2026-62711, CVE-2026-62712, CVE-2026-62714, CVE-2026-62716, CVE-2026-62717, CVE-2026-62718, CVE-2026-62719, CVE-2026-62720, CVE-2026-62721, CVE-2026-62723, CVE-2026-62724, CVE-2026-62725, CVE-2026-62726, CVE-2026-62728, CVE-2026-62729, CVE-2026-62730, CVE-2026-62732, CVE-2026-62733, CVE-2026-62734, CVE-2026-62735, CVE-2026-62738, CVE-2026-62740, CVE-2026-62741, CVE-2026-62742, CVE-2026-62743, CVE-2026-62745, CVE-2026-62746, CVE-2026-62748, CVE-2026-62750, CVE-2026-62752, CVE-2026-62753, CVE-2026-62754, CVE-2026-62755, CVE-2026-62757, CVE-2026-62758, CVE-2026-62761, CVE-2026-62768, CVE-2026-62769, CVE-2026-62770, CVE-2026-62773, CVE-2026-62776, CVE-2026-62778, CVE-2026-62781, CVE-2026-62784, CVE-2026-62785, CVE-2026-62786, CVE-2026-62787, CVE-2026-62790, CVE-2026-62792, CVE-2026-62793, CVE-2026-62795, CVE-2026-62796, CVE-2026-62797, CVE-2026-62800, CVE-2026-62803, CVE-2026-62807, CVE-2026-62812, CVE-2026-62814, CVE-2026-62816, CVE-2026-62818, CVE-2026-62819, CVE-2026-62822, CVE-2026-62823, CVE-2026-62824, CVE-2026-62876, CVE-2026-62877, CVE-2026-62878, CVE-2026-62880, CVE-2026-62881, CVE-2026-62883, CVE-2026-62885, CVE-2026-62887, CVE-2026-62889, CVE-2026-62890, CVE-2026-62893, CVE-2026-62908, CVE-2026-65662, CVE-2026-65679, CVE-2026-65774, CVE-2026-65775, CVE-2026-65784, CVE-2026-65790, CVE-2026-65791, CVE-2026-65794, CVE-2026-65796, CVE-2026-65797, CVE-2026-65798, CVE-2026-65799, CVE-2026-65814, CVE-2026-66799, CVE-2026-68819, CVE-2026-68820, CVE-2026-70304, CVE-2026-70307, CVE-2026-70330, CVE-2026-70344, CVE-2026-70345, CVE-2026-70346, CVE-2026-70347