Patch tracker / Products / Windows Server 2012 R2
Windows Server 2012 R2: vulnerabilities and security updates
Every CVE affecting Windows Server 2012 R2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
2285
Updates (KBs)
45
Actively exploited (KEV)
40
Critical Severity
120
CVEs affecting Windows Server 2012 R2
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2025-26633 | High | 7.0 | 30% | KEVRansomware |
| CVE-2025-29824 | High | 7.8 | 19% | KEVRansomware |
| CVE-2025-59287 | Critical | 9.8 | 100% | KEV |
| CVE-2025-33053 | High | 8.8 | 87% | KEV |
| CVE-2025-33073 | High | 8.8 | 83% | KEV |
| CVE-2026-21510 | High | 8.8 | 61% | KEV |
| CVE-2026-32202 | Medium | 4.3 | 71% | KEV |
| CVE-2025-24054 | Medium | 6.5 | 62% | KEV |
| CVE-2024-43451 | High | - | 84% | KEV |
| CVE-2024-43572 | High | - | 67% | KEV |
| CVE-2024-49138 | High | 7.8 | 26% | KEV |
| CVE-2025-30397 | High | 7.5 | 27% | KEV |
| CVE-2024-43461 | High | - | 54% | KEV |
| CVE-2026-21513 | High | 8.8 | 16% | KEV |
| CVE-2024-43573 | High | - | 46% | KEV |
| CVE-2026-96951 | High | 8.8 | 9.8% | KEV |
| CVE-2024-38178 | High | - | 41% | KEV |
| CVE-2025-24990 | High | 7.8 | 6.5% | KEV |
| CVE-2026-68820 | High | 7.0 | 8.6% | KEV |
| CVE-2026-21533 | High | 7.8 | 4.3% | KEV |
| CVE-2025-24985 | High | 7.8 | 3.9% | KEV |
| CVE-2025-59230 | High | 7.8 | 2.7% | KEV |
| CVE-2025-32706 | High | 7.8 | 2.3% | KEV |
| CVE-2025-24993 | High | 7.8 | 2.2% | KEV |
| CVE-2025-21418 | High | 7.8 | 2.1% | KEV |
| CVE-2025-32709 | High | 7.8 | 1.8% | KEV |
| CVE-2025-32701 | High | 7.8 | 1.4% | KEV |
| CVE-2026-85880 | High | 7.8 | 0.4% | KEV |
| CVE-2026-56155 | High | 7.8 | 0.3% | KEV |
| CVE-2024-38193 | High | - | 29% | KEV |
| CVE-2026-21525 | Medium | 6.2 | 5.0% | KEV |
| CVE-2025-24983 | High | 7.0 | 1.9% | KEV |
| CVE-2026-20805 | Medium | 5.5 | 7.5% | KEV |
| CVE-2025-24991 | Medium | 5.5 | 2.0% | KEV |
| CVE-2025-47827 | Medium | 4.6 | 5.2% | KEV |
| CVE-2025-24984 | Medium | 4.6 | 2.0% | KEV |
| CVE-2024-38213 | High | - | 14% | KEV |
| CVE-2024-38217 | High | - | 10% | KEV |
| CVE-2024-38014 | High | - | 6.3% | KEV |
| CVE-2024-38107 | High | - | 1.6% | KEV |
| CVE-2026-41089 | Critical | 9.8 | 78% | - |
| CVE-2024-49113 | High | 7.5 | 84% | - |
| CVE-2025-21298 | Critical | 9.8 | 74% | - |
| CVE-2024-38063 | Critical | 9.8 | 74% | - |
| CVE-2024-49112 | Critical | 9.8 | 72% | - |
| CVE-2025-53778 | High | 8.8 | 52% | - |
| CVE-2025-21285 | High | 7.5 | 56% | - |
| CVE-2025-47981 | Critical | 9.8 | 41% | - |
| CVE-2025-21277 | High | 7.5 | 39% | - |
| CVE-2024-38144 | High | 8.8 | 32% | - |
| CVE-2025-21377 | Medium | 6.5 | 40% | - |
| CVE-2026-47291 | Critical | 9.8 | 25% | - |
| CVE-2025-54918 | High | 8.8 | 27% | - |
| CVE-2025-30394 | Medium | 5.9 | 34% | - |
| CVE-2025-50154 | Medium | 6.5 | 32% | - |
| CVE-2025-55234 | High | 8.8 | 21% | - |
| CVE-2025-33071 | High | 8.1 | 23% | - |
| CVE-2025-53722 | High | 7.5 | 23% | - |
| CVE-2025-47984 | High | 7.5 | 23% | - |
| CVE-2024-49122 | High | 8.1 | 21% | - |
| CVE-2025-29962 | High | 8.8 | 16% | - |
| CVE-2024-43454 | High | 7.1 | 22% | - |
| CVE-2025-21293 | High | 8.8 | 15% | - |
| CVE-2025-24071 | Medium | 6.5 | 23% | - |
| CVE-2024-43639 | Critical | 9.8 | 8.9% | - |
| CVE-2025-21309 | High | 8.1 | 15% | - |
| CVE-2025-53766 | Critical | 9.8 | 8.5% | - |
| CVE-2024-43532 | High | 8.8 | 12% | - |
| CVE-2026-20872 | Medium | 6.5 | 20% | - |
| CVE-2025-60724 | Critical | 9.8 | 6.3% | - |
| CVE-2025-27480 | High | 8.1 | 13% | - |
| CVE-2026-20925 | Medium | 6.5 | 18% | - |
| CVE-2025-53143 | High | 8.8 | 9.0% | - |
| CVE-2025-53144 | High | 8.8 | 8.5% | - |
| CVE-2025-53145 | High | 8.8 | 8.5% | - |
| CVE-2025-26670 | High | 8.1 | 11% | - |
| CVE-2025-33070 | High | 8.1 | 10% | - |
| CVE-2024-38140 | Critical | 9.8 | 3.8% | - |
| CVE-2025-21376 | High | 8.1 | 9.3% | - |
| CVE-2024-38199 | Critical | 9.8 | 2.2% | - |
| CVE-2025-21307 | Critical | 9.8 | 1.9% | - |
| CVE-2026-42980 | High | 7.8 | 9.2% | - |
| CVE-2024-38214 | Critical | 9.8 | 1.6% | - |
| CVE-2025-54110 | High | 8.8 | 5.1% | - |
| CVE-2026-57092 | Critical | 9.9 | 0.9% | - |
| CVE-2024-43487 | Critical | 9.8 | 1.2% | - |
| CVE-2026-100202 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83693 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83770 | Critical | 9.8 | 1.1% | - |
| CVE-2026-44815 | Critical | 9.8 | 1.1% | - |
| CVE-2026-97814 | Critical | 9.8 | 1.1% | - |
| CVE-2026-70096 | Critical | 9.8 | 1.1% | - |
| CVE-2026-70147 | Critical | 9.8 | 1.1% | - |
| CVE-2026-70153 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83578 | Critical | 9.8 | 1.1% | - |
| CVE-2026-100222 | Critical | 9.8 | 1.1% | - |
| CVE-2026-70157 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83517 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83519 | Critical | 9.8 | 1.1% | - |
| CVE-2026-83910 | Critical | 9.8 | 1.1% | - |
| CVE-2026-97805 | Critical | 9.8 | 1.1% | - |
| CVE-2026-96320 | Critical | 9.8 | 1.1% | - |
| CVE-2026-68839 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69845 | Critical | 9.8 | 1.0% | - |
| CVE-2026-96924 | Critical | 9.8 | 1.0% | - |
| CVE-2026-105010 | Critical | 9.8 | 1.0% | - |
| CVE-2026-83782 | Critical | 9.8 | 1.0% | - |
| CVE-2026-42990 | Critical | 9.8 | 1.0% | - |
| CVE-2026-50447 | Critical | 9.8 | 1.0% | - |
| CVE-2026-50518 | Critical | 9.8 | 1.0% | - |
| CVE-2026-56159 | Critical | 9.8 | 1.0% | - |
| CVE-2026-56190 | Critical | 9.8 | 1.0% | - |
| CVE-2026-62878 | Critical | 9.8 | 1.0% | - |
| CVE-2026-62893 | Critical | 9.8 | 1.0% | - |
| CVE-2026-65791 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69276 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69408 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69431 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69463 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69491 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69493 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69496 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69525 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69579 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69590 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69595 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69715 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69730 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69768 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69769 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69819 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69824 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69829 | Critical | 9.8 | 1.0% | - |
| CVE-2026-70296 | Critical | 9.8 | 1.0% | - |
| CVE-2026-72979 | Critical | 9.8 | 1.0% | - |
| CVE-2026-72982 | Critical | 9.8 | 1.0% | - |
| CVE-2026-72983 | Critical | 9.8 | 1.0% | - |
| CVE-2026-73009 | Critical | 9.8 | 1.0% | - |
| CVE-2026-77493 | Critical | 9.8 | 1.0% | - |
| CVE-2026-78445 | Critical | 9.8 | 1.0% | - |
| CVE-2026-70024 | Critical | 9.8 | 1.0% | - |
| CVE-2026-69634 | Critical | 9.8 | 0.9% | - |
| CVE-2026-69705 | Critical | 9.8 | 0.9% | - |
| CVE-2026-69883 | Critical | 9.8 | 0.9% | - |
| CVE-2026-69886 | Critical | 9.8 | 0.9% | - |
| CVE-2024-38258 | High | 8.8 | 4.7% | - |
| CVE-2026-96934 | Critical | 9.8 | 0.9% | - |
| CVE-2024-38234 | Critical | 9.8 | 0.9% | - |
| CVE-2026-85809 | Critical | 9.8 | 0.9% | - |
| CVE-2026-85814 | Critical | 9.8 | 0.9% | - |
| CVE-2026-83748 | Critical | 9.8 | 0.9% | - |
| CVE-2026-85806 | Critical | 9.8 | 0.9% | - |
| CVE-2026-73025 | Critical | 9.8 | 0.9% | - |
| CVE-2026-83935 | Critical | 9.8 | 0.9% | - |
| CVE-2026-85792 | Critical | 9.8 | 0.9% | - |
| CVE-2026-84015 | Critical | 9.8 | 0.9% | - |
| CVE-2026-96113 | Critical | 9.8 | 0.9% | - |
| CVE-2026-97815 | Critical | 9.8 | 0.9% | - |
| CVE-2026-83869 | Critical | 9.8 | 0.8% | - |
| CVE-2026-20860 | High | 7.8 | 8.3% | - |
| CVE-2024-43634 | Critical | 9.8 | 0.7% | - |
| CVE-2024-43637 | Critical | 9.8 | 0.7% | - |
| CVE-2024-43638 | Critical | 9.8 | 0.7% | - |
| CVE-2024-43643 | Critical | 9.8 | 0.7% | - |
| CVE-2024-43449 | Critical | 9.8 | 0.7% | - |
| CVE-2024-38256 | Critical | 9.8 | 0.7% | - |
| CVE-2024-38223 | Critical | 9.8 | 0.7% | - |
| CVE-2024-38203 | Critical | 9.8 | 0.7% | - |
| CVE-2026-96096 | Critical | 9.8 | 0.7% | - |
| CVE-2026-85928 | Critical | 9.8 | 0.6% | - |
| CVE-2026-96864 | Critical | 9.8 | 0.6% | - |
| CVE-2024-38151 | Critical | 9.8 | 0.6% | - |
| CVE-2024-38118 | Critical | 9.8 | 0.6% | - |
| CVE-2024-38122 | Critical | 9.8 | 0.6% | - |
| CVE-2026-56188 | Critical | 9.8 | 0.6% | - |
| CVE-2026-50380 | Critical | 9.6 | 0.8% | - |
| CVE-2025-27740 | High | 8.8 | 3.5% | - |
| CVE-2025-21204 | High | 7.8 | 7.1% | - |
| CVE-2026-24294 | High | 7.8 | 7.1% | - |
| CVE-2025-26645 | High | 8.8 | 3.2% | - |
| CVE-2024-43512 | Critical | 9.0 | 2.1% | - |
| CVE-2026-50508 | Medium | 6.5 | 11% | - |
| CVE-2024-43534 | Critical | 9.0 | 1.8% | - |
| CVE-2024-38230 | High | 8.8 | 2.4% | - |
| CVE-2025-21371 | High | 8.8 | 2.4% | - |
| CVE-2025-26647 | High | 8.8 | 2.3% | - |
| CVE-2026-49798 | Critical | 9.3 | 0.4% | - |
| CVE-2024-38196 | High | 7.8 | 6.0% | - |
| CVE-2024-38125 | High | 7.8 | 5.9% | - |
| CVE-2025-21368 | High | 8.8 | 2.2% | - |
| CVE-2025-21369 | High | 8.8 | 2.2% | - |
| CVE-2025-50177 | High | 8.1 | 4.6% | - |
| CVE-2024-38124 | Critical | 9.0 | 1.2% | - |
| CVE-2025-59295 | High | 8.8 | 1.9% | - |
| CVE-2024-38231 | High | 8.8 | 1.9% | - |
| CVE-2026-54121 | High | 8.8 | 1.8% | - |
| CVE-2024-38116 | High | 8.8 | 1.8% | - |
| CVE-2025-21406 | High | 8.8 | 1.8% | - |
| CVE-2025-21407 | High | 8.8 | 1.8% | - |
| CVE-2025-21410 | High | 8.8 | 1.8% | - |
| CVE-2024-43611 | High | 8.8 | 1.8% | - |
| CVE-2025-21208 | High | 8.8 | 1.8% | - |
| CVE-2025-21190 | High | 8.8 | 1.8% | - |
| CVE-2025-21200 | High | 8.8 | 1.8% | - |
| CVE-2025-21201 | High | 8.8 | 1.8% | - |
| CVE-2024-49080 | High | 8.8 | 1.7% | - |
| CVE-2024-43520 | Critical | 9.0 | 1.0% | - |
| CVE-2024-43627 | High | 8.8 | 1.7% | - |
| CVE-2024-43628 | High | 8.8 | 1.7% | - |
| CVE-2025-21233 | High | 8.8 | 1.7% | - |
| CVE-2025-21236 | High | 8.8 | 1.7% | - |
| CVE-2025-21237 | High | 8.8 | 1.7% | - |
| CVE-2025-21238 | High | 8.8 | 1.7% | - |
| CVE-2025-21240 | High | 8.8 | 1.7% | - |
| CVE-2025-21243 | High | 8.8 | 1.7% | - |
| CVE-2025-21244 | High | 8.8 | 1.7% | - |
| CVE-2025-21245 | High | 8.8 | 1.7% | - |
| CVE-2025-21246 | High | 8.8 | 1.7% | - |
| CVE-2025-21250 | High | 8.8 | 1.7% | - |
| CVE-2024-43635 | High | 8.8 | 1.7% | - |
| CVE-2024-49102 | High | 8.8 | 1.7% | - |
| CVE-2024-49104 | High | 8.8 | 1.7% | - |
| CVE-2026-96252 | Critical | 9.1 | 0.6% | - |
| CVE-2024-43455 | High | 8.8 | 1.7% | - |
| CVE-2024-43592 | High | 8.8 | 1.7% | - |
| CVE-2024-43593 | High | 8.8 | 1.7% | - |
| CVE-2024-43620 | High | 8.8 | 1.6% | - |
| CVE-2024-43621 | High | 8.8 | 1.6% | - |
| CVE-2024-43622 | High | 8.8 | 1.6% | - |
| CVE-2025-21223 | High | 8.8 | 1.6% | - |
| CVE-2024-38115 | High | 8.8 | 1.6% | - |
| CVE-2024-38121 | High | 8.8 | 1.6% | - |
| CVE-2024-38128 | High | 8.8 | 1.6% | - |
| CVE-2024-38130 | High | 8.8 | 1.6% | - |
| CVE-2024-38120 | High | 8.8 | 1.6% | - |
| CVE-2024-38260 | High | 8.8 | 1.6% | - |
| CVE-2025-27477 | High | 8.8 | 1.6% | - |
| CVE-2024-38154 | High | 8.8 | 1.6% | - |
| CVE-2024-38180 | High | 8.8 | 1.6% | - |
| CVE-2024-49085 | High | 8.8 | 1.6% | - |
| CVE-2024-49086 | High | 8.8 | 1.6% | - |
| CVE-2024-38114 | High | 8.8 | 1.6% | - |
| CVE-2025-24056 | High | 8.8 | 1.6% | - |
| CVE-2024-49125 | High | 8.8 | 1.5% | - |
| CVE-2025-26669 | High | 8.8 | 1.5% | - |
| CVE-2024-43519 | High | 8.8 | 1.5% | - |
| CVE-2026-45602 | Critical | 9.1 | 0.4% | - |
| CVE-2024-43456 | Critical | 9.0 | 0.7% | - |
| CVE-2024-43589 | High | 8.8 | 1.5% | - |
| CVE-2025-24051 | High | 8.8 | 1.5% | - |
Showing the 250 highest-risk of 2285 CVEs. See all in the CVE reference.
Updates (KBs) for Windows Server 2012 R2
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5053887 | 2025-03-11 | High | 8.8 | 62% | 25 | KEVRansomware |
| KB5055557 | 2025-04-08 | High | 8.8 | 19% | 55 | KEVRansomware |
| KB5070886 | 2025-10-14 | Critical | 9.8 | 100% | 1 | KEV |
| KB5046682 | 2024-11-12 | Critical | 9.8 | 84% | 22 | KEV |
| KB5048735 | 2024-12-10 | Critical | 9.8 | 84% | 26 | KEV |
| KB5060996 | 2025-06-10 | High | 8.8 | 87% | 1 | KEV |
| KB5061018 | 2025-06-10 | High | 8.8 | 87% | 23 | KEV |
| KB5041828 | 2024-08-13 | Critical | 9.8 | 74% | 38 | KEV |
| KB5046630 | 2024-11-12 | Medium | 6.5 | 84% | 1 | KEV |
| KB5099444 | 2026-07-14 | Critical | 9.9 | 71% | 182 | KEV |
| KB5044343 | 2024-10-08 | Critical | 9.0 | 67% | 49 | KEV |
| KB5075970 | 2026-02-10 | High | 8.8 | 61% | 15 | KEV |
| KB5043138 | 2024-09-10 | High | 8.8 | 54% | 22 | KEV |
| KB5052042 | 2025-02-11 | High | 8.8 | 40% | 23 | KEV |
| KB5041770 | 2024-08-13 | High | 7.5 | 41% | 1 | KEV |
| KB5058403 | 2025-05-13 | High | 8.8 | 34% | 34 | KEV |
| KB5058380 | 2025-05-13 | High | 7.5 | 27% | 1 | KEV |
| KB5073696 | 2026-01-13 | High | 8.8 | 20% | 37 | KEV |
| KB5126836 | 2026-10-13 | Critical | 9.8 | 9.8% | 649 | KEV |
| KB5120385 | 2026-08-11 | Critical | 9.8 | 8.6% | 136 | KEV |
| KB5066873 | 2025-10-14 | High | 8.8 | 6.5% | 50 | KEV |
| KB5039294 | 2024-08-13 | Medium | 6.5 | 14% | 1 | KEV |
| KB5123066 | 2026-09-08 | Critical | 9.8 | 1.2% | 425 | KEV |
| KB5087471 | 2026-05-12 | Critical | 9.8 | 78% | 42 | - |
| KB5050048 | 2025-01-14 | Critical | 9.8 | 74% | 96 | - |
| KB5063950 | 2025-08-12 | Critical | 9.8 | 52% | 47 | - |
| KB5062597 | 2025-07-08 | Critical | 9.8 | 41% | 63 | - |
| KB5051972 | 2025-02-11 | Medium | 6.5 | 40% | 1 | - |
| KB5094041 | 2026-06-09 | Critical | 9.8 | 25% | 67 | - |
| KB5065507 | 2025-09-09 | High | 8.8 | 27% | 35 | - |
| KB5068905 | 2025-11-11 | Critical | 9.8 | 6.3% | 18 | - |
| KB5078774 | 2026-03-10 | High | 8.8 | 7.1% | 32 | - |
| KB5082126 | 2026-04-14 | High | 8.8 | 3.5% | 60 | - |
| KB5071503 | 2025-12-09 | High | 8.8 | 2.4% | 11 | - |
| KB5066840 | 2025-10-14 | High | 8.8 | 1.9% | 3 | - |
| KB5055515 | 2025-04-08 | High | 8.6 | 0.8% | 1 | - |
| KB5049994 | 2025-01-14 | High | 7.5 | 4.5% | 7 | - |
| KB5040456 | 2024-08-13 | High | 7.8 | 0.5% | 1 | - |
| KB5127356 | 2026-10-13 | High | 7.8 | 0.4% | 2 | - |
| KB5099415 | 2026-07-14 | High | 7.8 | 0.3% | 1 | - |
| KB5082806 | 2026-04-14 | High | 7.8 | 0.3% | 1 | - |
| KB5094006 | 2026-06-09 | High | 7.8 | 0.3% | 1 | - |
| KB5078738 | 2026-03-10 | High | 7.5 | 1.4% | 1 | - |
| KB5053593 | 2025-03-11 | Medium | 4.3 | 3.0% | 1 | - |
| KB5065435 | 2025-09-09 | Medium | 4.3 | 1.0% | 2 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5126651: the full CVE list
KB5126655 install notes and severity
KB5126657: the full CVE list
KB5126646 install notes and severity
KB5122876 install notes and severity
KB5126868 install notes and severity
KB5126052 install notes and severity
KB5127648: patch details
KB5122882: the full CVE list
CVE-2026-111497: severity and the patch