Windows Server 2012
5,368 CVEs tracked. 167 of them are in CISA KEV.
This hub aggregates every CVE we track for Windows Server 2012, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Windows Server 2012 CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 22 |
| 2024-12 | 29 |
| 2025-01 | 97 |
| 2025-02 | 23 |
| 2025-03 | 27 |
| 2025-04 | 55 |
| 2025-05 | 31 |
| 2025-06 | 25 |
| 2025-07 | 61 |
| 2025-08 | 50 |
| 2025-09 | 35 |
| 2025-10 | 49 |
| 2025-11 | 17 |
| 2025-12 | 12 |
| 2026-01 | 36 |
| 2026-02 | 15 |
| 2026-03 | 32 |
| 2026-04 | 59 |
| 2026-05 | 42 |
| 2026-06 | 66 |
| 2026-07 | 189 |
| 2026-08 | 147 |
| 2026-09 | 419 |
| 2026-10 | 635 |
Severity
How the 5,368 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical243
- High3,534
- Medium1,534
- Low57
Latest CVEs
The 15 most recently published vulnerabilities affecting Windows Server 2012.
- CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8
- CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability7.5
- CVE-2026-97841Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97840Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97844Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97842Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97843Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97839Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-108127Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-108128Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97827Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97831Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97835Role: DNS Server Information Disclosure Vulnerability6.5
- CVE-2026-97833Role: DNS Server Information Disclosure Vulnerability6.5
Product grouping is registry-driven, with AI assist and human review. How it works