WS
Product
Windows Server 2012 (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
5,294
CVEs
159
On KEV
10.0
Max CVSS
651
New 30D
Severity mix
Critical 198High 280Medium 22Low 0
Watch
Add Windows Server 2012 (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: 6.2.9200.0 before 6.2.9200.23817 |
| CVE-2022-30136 | 9.8 | Jun 15 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-26937 | 9.8 | May 10 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-24497 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2022-24491 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: r2 |
| CVE-2021-26432 | 9.8 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26897 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26895 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26894 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26893 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-26877 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24078 | 9.8 | Feb 25 | Windows DNS Server Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: r2 |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: r2 |
| CVE-2020-17051 | 9.8 | Nov 11 | Windows Network File System Remote Code Execution Vulnerability Affected: r2 |
| CVE-2020-0610 | 9.8 | Jan 14 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends… Affected: r2 |
| CVE-2020-0609 | 9.8 | Jan 14 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends… Affected: r2 |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: r2 |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: r2 |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: r2 |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: r2 |
| CVE-2019-0785 | 9.8 | Jul 15 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server… Affected: r2 |
| CVE-2019-0725 | 9.8 | May 16 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution… Affected: r2 |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: r2 |
| CVE-2018-8626 | 9.8 | Dec 12 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow… Affected: r2 |
| CVE-2018-8476 | 9.8 | Nov 14 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote… Affected: r2 |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: r2 |
| CVE-2017-8686 | 9.8 | Sep 13 | The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause… Affected: r2 |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: r2 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: r2 |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: r2 |
| CVE-2016-3227 | 9.8 | Jun 16 | Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka… Affected: r2; r2; r2 |
| CVE-2026-50380 | 9.6 | Jul 14 | Windows GDI+ Remote Code Execution Vulnerability Affected: 6.2.9200.0 before 6.2.9200.26226 |
| CVE-2021-31962 | 9.4 | Jun 8 | Kerberos AppContainer Security Feature Bypass Vulnerability Affected: r2 |
| CVE-2026-49798 | 9.3 | Jul 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: 6.2.9200.0 before 6.2.9200.26226 |
| CVE-2016-0088 | 9.3 | Apr 12 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka… Affected: r2 |
| CVE-2026-96252 | 9.1 | Oct 13 | Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 6.2.9200.0 before 6.2.9200.26434 |
| CVE-2026-45602 | 9.1 | Jun 9 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Affected: 6.2.9200.0 before 6.2.9200.26132 |
| CVE-2019-0719 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: r2 |
| CVE-2026-105008 | 9.0 | Oct 13 | Windows Schannel Spoofing Vulnerability Affected: 6.2.9200.0 before 6.2.9200.26434 |
| CVE-2024-38124 | 9.0 | Oct 8 | Windows Netlogon Elevation of Privilege Vulnerability Affected: r2 |
| CVE-2020-1043 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1042 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
| CVE-2020-1041 | 9.0 | Jul 14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system,… Affected: r2 |
The 500 most important CVEs for this product (exploited first, then by severity)