Windows Server 2012 R2 (Server Core installation)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

5critical182high255medium41low

updated 2026-10-28

vulnerabilities (1,677)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	6.3.9600.20046	2021-07-02	2 versions
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	6.3.9600.21503	2023-07-11	2 versions
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	6.3.9600.20402	2022-06-01	2 versions
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	6.3.9600.20120	2021-09-15	2 versions
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	6.3.9600.21668	2023-11-14	2 versions
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	6.3.9600.22620	2025-06-10	2 versions
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	6.3.9600.22267	2024-11-12	2 versions
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	6.3.9600.22074	2024-07-09	2 versions
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	6.3.9600.20919	2022-05-10	2 versions
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	6.3.9600.22620	2025-06-10	2 versions
CVE-2021-42287US	medium6.5OT critical	77.2% (100th)	KEV	6.3.9600.20174	2021-11-10	2 versions
CVE-2021-42278US	medium6.5OT critical	73.3% (99th)	KEV	6.3.9600.20174	2021-11-10	2 versions
CVE-2021-36942US	medium5.0OT critical	66.0% (99th)	KEV	6.3.9600.20094	2021-08-12	2 versions
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	6.3.9600.23022	2026-02-10	2 versions
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	6.3.9600.20919	2023-04-11	2 versions
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	6.3.9600.21075	2023-07-11	2 versions
CVE-2023-29336US	—OT critical	41.2% (99th)	KEV	6.3.9600.20969	2023-05-09	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	6.3.9600.20269	2022-02-09	2 versions
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	6.3.9600.20778	2023-01-10	2 versions
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	6.3.9600.22134	2024-08-13	2 versions
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	6.3.9600.20571	2022-09-13	2 versions
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	6.3.9600.22577	2025-05-13	2 versions
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	6.3.9600.22318	2024-12-12	2 versions
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	6.3.9600.22023	2024-06-11	2 versions
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	6.3.9600.22523	2025-04-08	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	6.3.9600.20269	2022-02-09	2 versions
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	6.3.9600.20337	2022-04-15	2 versions
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	6.3.9600.21668	2023-11-14	2 versions
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	6.3.9600.20337	2022-04-15	2 versions
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	6.3.9600.20821	2023-02-14	2 versions
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	6.3.9600.23022	2026-02-10	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	6.3.9600.20120	2021-09-15	2 versions
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	6.3.9600.21871	2024-03-12	2 versions
CVE-2025-32709US	—OT critical	1.82% (79th)	KEV	6.3.9600.22577	2025-05-13	2 versions
CVE-2023-28229US	—OT critical	1.67% (77th)	KEV	6.3.9600.20919	2023-04-11	2 versions
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	6.3.9600.20520	2022-08-09	2 versions
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	6.3.9600.22221	2024-10-08	2 versions
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	6.3.9600.22175	2024-09-10	2 versions
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	6.3.9600.22221	2024-10-08	2 versions
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	6.3.9600.22134	2024-08-13	2 versions
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	6.3.9600.20094	2021-08-12	2 versions
CVE-2023-36563US	medium5.5OT critical	20.3% (97th)	KEV	6.3.9600.21620	2023-10-10	2 versions
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	6.3.9600.20174	2021-11-10	2 versions
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	6.3.9600.20478	2022-07-12	2 versions
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	6.3.9600.21668	2023-11-14	2 versions
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	6.3.9600.23022	2026-02-10	2 versions
CVE-2022-38028US	—OT critical	14.9% (97th)	KEV	6.3.9600.20625	2022-10-11	2 versions
CVE-2024-38213US	—OT critical	13.6% (96th)	KEV	6.3.9600.22023	2024-08-13	2 versions
CVE-2023-23376US	—OT critical	10.9% (96th)	KEV	6.3.9600.20821	2023-02-14	2 versions
CVE-2022-26925US	medium5.9OT critical	10.5% (96th)	KEV	6.3.9600.20371	2022-05-10	2 versions

showing 50 of 1,677

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation353 CVEs
CWE-264CWE-264217 CVEs
CWE-122Heap-based Buffer Overflow202 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor153 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')147 CVEs
CWE-269Improper Privilege Management142 CVEs
CWE-416Use After Free140 CVEs
CWE-125Out-of-bounds Read112 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)1,677 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan