Microsoft Windows Server 2012 vulnerabilities
3,854 published CVEs name Microsoft Windows Server 2012 among the affected products; CISA lists 91 of them as exploited in the wild.
- Published CVEs
- 3,854
- Last 12 months
- 1,577
- Critical
- 152
- Known exploited
- 91
Critical 152High 2,674Medium 1,019Low 9Not scored 0
CVEs per yearBy the year they were published
- 20131
- 2018106
- 201983
- 2020159
- 2021313
- 2022382
- 2023435
- 2024377
- 2025448
- 20261,550
Known exploitedNewest addition to KEV first
- CVE-2026-85880
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2026-68820
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.0 - CVE-2026-56155
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2026-32202
Windows Shell Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedMedium4.3 - CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 22H3
ExploitedHigh7.8 - CVE-2026-21525
Windows Remote Access Connection Manager Denial of Service Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedMedium6.2 - CVE-2026-21510
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh8.8 - CVE-2026-21513
MSHTML Framework Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh8.8 - CVE-2026-21533
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2026-20805
Desktop Window Manager Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedMedium5.5
Newest CVEs
- CVE-2026-108136
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8 - CVE-2026-108131
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
High7.5 - CVE-2026-108129
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-108128
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-108127
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-97844
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-97843
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-97842
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-97841
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-97840
Role: DNS Server Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5