Windows Server 2012 R2 (Server Core installation) vulnerabilities

Product

Windows Server 2012 R2 (Server Core installation)

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wildRansomware-linked

1,945

CVEs

101

On KEV

9.9

Max CVSS

657

New 30D

Vulnerabilities1,945 In the news12 Timeline

Severity mix

Critical 102High 380Medium 18Low 0

Severity

All severities500 Critical102 High380 Medium18 Low0

Exploitation

On CISA KEV101 Exploited in the wild101

Watch

Add Windows Server 2012 R2 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-62818	8.8	1%	Aug 11	Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-62816	8.8	1%	Aug 11	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-62795	8.8	1%	Aug 11	Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-62784	8.8	1%	Aug 11	Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-62785	8.8	1%	Aug 11	Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-49179	8.8	1%	Aug 11	Windows Active Directory Domain Services Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23338
CVE-2026-56647	8.8	1%	Jul 14	Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-56194	8.8	1%	Jul 14	Windows NFS Server Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-54121	8.8	1%	Jul 14	Active Directory Certificate Services Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50666	8.8	1%	Jul 14	Windows Remote Access Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50505	8.8	1%	Jul 14	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50500	8.8	1%	Jul 14	Windows Netlogon Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50502	8.8	1%	Jul 14	Windows Event Logging Service Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50444	8.8	1%	Jul 14	Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50474	8.8	1%	Jul 14	Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50369	8.8	1%	Jul 14	Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-50370	8.8	1%	Jul 14	DHCP Server Service Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-49178	8.8	1%	Jul 14	Windows Active Directory Domain Services Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-48564	8.8	1%	Jul 14	DHCP Server Service Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228
CVE-2026-54999	8.8	0%	Jul 14	Windows TCP/IP Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-54982	8.8	1%	Jul 14	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-42975	8.8	1%	Jul 14	Windows Bluetooth Port Driver Remote Code Execution Affected: 6.3.9600.0 before 6.3.9600.23291
CVE-2026-42985	8.8	1%	Jun 9	Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228
CVE-2026-47653	8.8	1%	Jun 9	Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228
CVE-2026-47289	8.8	1%	Jun 9	Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23228
CVE-2026-40403	8.8	0%	May 12	Windows Graphics Component Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23181
CVE-2026-34329	8.8	0%	May 12	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23181
CVE-2026-32225	8.8	1%	Apr 14	Windows Shell Security Feature Bypass Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23132
CVE-2026-25188	8.8	1%	Mar 10	Windows Telephony Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23074
CVE-2026-25177	8.8	1%	Mar 10	Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23074
CVE-2026-23669	8.8	1%	Mar 10	RPC Runtime Library Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.23074
CVE-2026-20868	8.8	1%	Jan 13	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22968
CVE-2025-64678	8.8	1%	Dec 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22869
CVE-2025-62549	8.8	1%	Dec 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22920
CVE-2025-58718	8.8	1%	Oct 14	Remote Desktop Client Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22824
CVE-2025-59295	8.8	2%	Oct 14	Windows URL Parsing Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22824
CVE-2025-54113	8.8	1%	Sep 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22774
CVE-2025-54918	8.8	25%	Sep 9	Windows NTLM Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22774
CVE-2025-54110	8.8	5%	Sep 9	Windows Kernel Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22774
CVE-2025-54106	8.8	1%	Sep 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22774
CVE-2024-38260	8.8	2%	Sep 10	Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.22175
CVE-2022-37982	8.8	2%	Oct 11	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-37976	8.8	2%	Oct 11	Active Directory Certificate Services Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-37975	8.8	2%	Oct 11	Windows Group Policy Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-38034	8.8	4%	Oct 11	Windows Workstation Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-38045	8.8	3%	Oct 11	Windows Server Service Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-38031	8.8	2%	Oct 11	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-38040	8.8	2%	Oct 11	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20625
CVE-2022-34691	8.8	2%	Aug 9	Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 6.3.9600.0 before 6.3.9600.20520
CVE-2018-8344	8.8	23%	Aug 15	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: (Server Core installation)