Windows Server 2012 R2 (Server Core installation) at a glance
22 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 17 | 1 |
| Oct 2026 | 657 | 39 |
| Sep 2026 | 418 | 28 |
| Aug 2026 | 144 | 3 |
| Jul 2026 | 186 | 9 |
| Jun 2026 | 64 | 2 |
| May 2026 | 42 | 1 |
| Apr 2026 | 58 | 0 |
| Mar 2026 | 32 | 0 |
| Feb 2026 | 15 | 0 |
| Jan 2026 | 35 | 0 |
| Dec 2025 | 12 | 0 |
| Nov 2025 | 17 | 1 |
| Oct 2025 | 49 | 1 |
| Sep 2025 | 35 | 0 |
| Aug 2025 | 50 | 1 |
| Jul 2025 | 61 | 1 |
| Jun 2025 | 23 | 0 |
| May 2025 | 31 | 0 |
| Apr 2025 | 55 | 0 |
| Mar 2025 | 24 | 0 |
| Feb 2025 | 23 | 0 |
| Jan 2025 | 94 | 2 |
| Dec 2024 | 28 | 1 |
Most common weaknesses
Latest advisories
-
High max 9.8
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft meerdere kwetsbaarheden verholpen in Windows.
first Sep 8, 2026 -
High max 9.8NCSC-2026-0472 13 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft kwetsbaarheden verholpen in Windows.
-
High max 9.9NCSC-2026-0423 51 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft 1159 kwetsbaarheden verholpen in Windows.
-
High max 9.8
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.
-
Critical max 9.8NCSC-2026-0181 119 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.
3,974 results · Feed
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Task Scheduler Elevation of Privilege Vulnerability
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Kerberos Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system…
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
AMD Zen Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
High 7.5
Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.