Microsoft Corp Windows Server 2012 R2 (Server Core installation)

Name: Microsoft Corp Windows Server 2012 R2 (Server Core installation)
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

66critical827high639medium104low

updated 2026-10-27

vulnerabilities (3,376)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-59287US	—OT critical	100.0% (100th)	KEV	no fix	2025-10-14	≤ 6.3.9600.22824
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	no fix	2021-07-02	—
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	no fix	2023-07-11	—
CVE-2020-1472US	high9.3OT critical	99.4% (100th)	KEV	no fix	2020-08-17	—
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	no fix	2022-06-01	—
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	no fix	2021-09-15	—
CVE-2020-1350US	critical10.0OT critical	96.7% (100th)	KEV	no fix	2020-07-14	—
CVE-2018-8174US	high7.5OT critical	88.2% (100th)	KEV	no fix	2018-05-09	—
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	—
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	no fix	2025-06-10	—
CVE-2021-1675US	high9.3OT critical	85.3% (100th)	KEV	no fix	2021-06-08	—
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	no fix	2024-11-12	—
CVE-2017-0213US	high7.3OT critical	84.3% (100th)	KEV	no fix	2017-05-12	—
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	—
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	no fix	2022-05-10	—
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	no fix	2025-06-10	—
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	no fix	2021-10-13	—
CVE-2021-42287US	medium6.5OT critical	77.2% (100th)	KEV	no fix	2021-11-10	—
CVE-2019-1458US	high7.8OT critical	74.4% (99th)	KEV	no fix	2019-12-10	—
CVE-2021-42278US	medium6.5OT critical	73.3% (99th)	KEV	no fix	2021-11-10	—
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 6.3.9600.23132
CVE-2021-36942US	medium5.0OT critical	66.0% (99th)	KEV	no fix	2021-08-12	—
CVE-2020-1020US	high8.8OT critical	65.0% (99th)	KEV	no fix	2020-04-15	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	≤ 6.3.9600.23022
CVE-2020-1054US	high7.0OT critical	53.9% (99th)	KEV	no fix	2020-05-21	—
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	no fix	2023-04-11	—
CVE-2019-0803US	high7.8OT critical	45.2% (99th)	KEV	no fix	2019-04-09	—
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	no fix	2023-07-11	—
CVE-2020-0787US	high7.8OT critical	42.5% (99th)	KEV	no fix	2020-03-12	—
CVE-2023-29336US	—OT critical	41.2% (99th)	KEV	no fix	2023-05-09	—
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	no fix	2022-02-09	—
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	no fix	2023-01-10	—
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	—
CVE-2019-1405US	high7.8OT critical	30.2% (98th)	KEV	no fix	2019-11-12	—
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	no fix	2024-08-13	—
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	no fix	2022-09-13	—
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	no fix	2025-05-13	—
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	no fix	2024-12-12	—
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	no fix	2024-06-11	—
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	no fix	2021-06-08	—
CVE-2018-8639US	high7.8OT critical	22.2% (98th)	KEV	no fix	2018-12-12	—
CVE-2019-1215US	high7.8OT critical	19.3% (97th)	KEV	no fix	2019-09-11	—
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	no fix	2025-04-08	—
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	no fix	2022-02-09	—
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	—
CVE-2019-1388US	high7.8OT critical	8.59% (95th)	KEV	no fix	2019-11-12	—
CVE-2020-0683US	high7.8OT critical	7.61% (95th)	KEV	no fix	2020-02-11	—
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	no fix	2026-01-13	≤ 6.3.9600.22968
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	no fix	2022-04-15	—
CVE-2025-24990US	—OT critical	6.37% (94th)	KEV	no fix	2025-10-14	≤ 6.3.9600.22824

showing 50 of 3,376

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation491 CVEs
CWE-122Heap-based Buffer Overflow386 CVEs
CWE-269Improper Privilege Management381 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor353 CVEs
CWE-264CWE-264343 CVEs
CWE-416Use After Free296 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer292 CVEs
CWE-125Out-of-bounds Read215 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)3,375 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan