WS
Product
Windows Server 2012 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
5,287
CVEs
159
On KEV
10.0
Max CVSS
644
New 30D
Severity mix
Critical 195High 283Medium 22Low 0
Watch

Add Windows Server 2012 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: r2
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.2.9200.0 before 6.2.9200.25368
CVE-2024-38217
In wildKEV
5.4
10%
Sep 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.2.9200.0 before 6.2.9200.25073
CVE-2023-36584
In wildKEV
5.4
3%
Oct 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.2.9200.0 before 6.2.9200.24523
CVE-2021-31201
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: 6.2.0 before 6.2.9200.23372
CVE-2021-31199
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: 6.2.0 before 6.2.9200.23372
CVE-2025-47827
In wildKEV
4.6
5%
Jun 5
IGEL OS Use of a Key Past its Expiration Date Vulnerability
Affected: r2
CVE-2025-24984
In wildKEV
4.6
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 6.2.9200.0 before 6.2.9200.25368
CVE-2026-32202
In wildKEV
4.3
71%
Apr 14
Windows Shell Spoofing Vulnerability
Affected: 6.2.9200.0 before 6.2.9200.26226
Page 4 of 4 · 159 total
1…34
The 500 most important CVEs for this product (exploited first, then by severity)