WS
Product
Windows Server 2012 R2 (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
1,762
CVEs
101
On KEV
9.9
Max CVSS
657
New 30D
Severity mix
Critical 97High 385Medium 18Low 0
Watch
Add Windows Server 2012 R2 (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48568 | 7.9 | Jun 9 | Secure Boot Security Feature Bypass Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228 |
| CVE-2026-45588 | 7.9 | Jun 9 | Secure Boot Security Feature Bypass Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228 |
| CVE-2026-108136 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-105004 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-105003 | 7.8 | Oct 13 | HID Class Driver Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-103568 | 7.8 | Oct 13 | Windows Credential Providers Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-103553 | 7.8 | Oct 13 | Windows Partition Management Driver Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-100215 | 7.8 | Oct 13 | Microsoft Graphics Component Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-102220 | 7.8 | Oct 13 | Windows VHD miniport driver Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-102215 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-102218 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-102216 | 7.8 | Oct 13 | Windows StateRepository API Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-102205 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-100217 | 7.8 | Oct 13 | Windows Group Policy Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96118 | 7.8 | Oct 13 | Windows Graphics Kernel Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96953 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96950 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96947 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96946 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96929 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96931 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96933 | 7.8 | Oct 13 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96915 | 7.8 | Oct 13 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96911 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96916 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96843 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96847 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96324 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-96186 | 7.8 | Oct 13 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-70143 | 7.8 | Oct 13 | Windows Network File System Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-70054 | 7.8 | Oct 13 | Windows NetBIOS Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-69884 | 7.8 | Oct 13 | Windows GDI Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88193 | 7.8 | Oct 13 | Microsoft Scripting Engine Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88191 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88182 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88133 | 7.8 | Oct 13 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88152 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88147 | 7.8 | Oct 13 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88118 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88135 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88126 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-88134 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-87702 | 7.8 | Oct 13 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-87700 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-87694 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-87699 | 7.8 | Oct 13 | Winlogon Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-69798 | 7.8 | Oct 13 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-85874 | 7.8 | Oct 13 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-83918 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
| CVE-2026-85908 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23470 |
The 500 most important CVEs for this product (exploited first, then by severity)