WS
Product
Windows Server 2012 R2 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
2,158
CVEs
101
On KEV
9.9
Max CVSS
657
New 30D
Severity mix
Critical 104High 378Medium 18Low 0
Watch

Add Windows Server 2012 R2 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49798
9.3
0%
Jul 14
Windows Kernel Elevation of Privilege Vulnerability
Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-96252
9.1
1%
Oct 13
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Affected: 6.3.9600.0 before 6.3.9600.23470
CVE-2026-45602
9.1
0%
Jun 9
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Affected: 6.3.9600.0 before 6.3.9600.23228
CVE-2026-105008
9.0
1%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 6.3.9600.0 before 6.3.9600.23470
Page 3 of 3 · 104 total
The 500 most important CVEs for this product (exploited first, then by severity)