Windows Server 2012

Vendor:

First CVE: Jun 13, 2012 · Active for 14 years

4,475
Total CVEs
More Total CVEs than 100% of tracked products
298.3
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
4.6%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Windows Server 2012 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 13, 2012
14 years ago
Most Recent CVE
Jul 14, 2026
11 days ago

CVE Severity & Scoring

Windows Server 20124,475 CVEs
All CVEs352,427 CVEs
LowMediumHighCritical
Attack Vector
Local2,182 (48.8%)
Network1,835 (41.0%)
Unknown252 (5.6%)
Physical82 (1.8%)
Adjacent Network124 (2.8%)
Attack Complexity
Low3,372 (75.4%)
High851 (19.0%)
Unknown252 (5.6%)
User Interaction
None2,895 (64.7%)
Unknown252 (5.6%)
Required1,328 (29.7%)
Privileges Required
Low2,162 (48.3%)
High162 (3.6%)
None1,899 (42.4%)
Unknown252 (5.6%)

Top CVEs

Signals from CVEs in this product scope (4475 CVEs).

4,475 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-59287CRITICAL
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
Oct 14, 20259.899YESYES
CVE-2020-1472CRITICAL
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc
Aug 17, 202010.099YESYES
CVE-2020-0646CRITICAL
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
Jan 14, 20209.899YESYES
CVE-2015-1635CRITICAL
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via c
Apr 14, 20159.899YESYES
CVE-2013-2251CRITICAL
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: p
Jul 20, 20139.899YESYES
CVE-2020-1147HIGH
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.
Jul 14, 20207.898YESYES
CVE-2017-0199HIGH
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows
Apr 12, 20177.898YESYES
CVE-2017-0148HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.198YESYES
CVE-2017-0147HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20177.598YESYES
CVE-2017-0144HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.898YESYES
View all 4,475 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (4475 CVEs).

CISA KEV
206 CVEs
4.6% of CVEs· 97th percentile
Metasploit
72 CVEs
1.6% of CVEs· 96th percentile
Nuclei
5 CVEs
0.1% of CVEs· 96th percentile
ExploitDB
332 CVEs
7.4% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (4475 CVEs).

Media Mentions

Signals from CVEs in this product scope (4475 CVEs).

Top CNAs Publishing CVEs For Windows Server 2012

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
r23,9567.36.5%151283