# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43570.md)
  `CVE-2024-43570` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43567.md)
  `CVE-2024-43567` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43564.md)
  `CVE-2024-43564` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43563.md)
  `CVE-2024-43563` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-591
- [Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43560.md)
  `CVE-2024-43560` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43556.md)
  `CVE-2024-43556` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [NT OS Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43553.md)
  `CVE-2024-43553` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Secure Channel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43550.md)
  `CVE-2024-43550` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Oct 2024 · Tags: Weak cryptography or TLS
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43549.md)
  `CVE-2024-43549` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Kerberos Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-43547.md)
  `CVE-2024-43547` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-325
- [Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43545.md)
  `CVE-2024-43545` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43544.md)
  `CVE-2024-43544` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43521.md)
  `CVE-2024-43521` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-253
- [Windows Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43520.md)
  `CVE-2024-43520` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Microsoft ActiveX Data Objects Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43517.md)
  `CVE-2024-43517` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43514.md)
  `CVE-2024-43514` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43512.md)
  `CVE-2024-43512` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43509.md)
  `CVE-2024-43509` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43501.md)
  `CVE-2024-43501` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Path traversal
- [Windows Remote Desktop Services Tampering Vulnerability](https://agentprime.io/advisories/CVE-2024-43456.md)
  `CVE-2024-43456` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Broken access control
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38212.md)
  `CVE-2024-38212` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43453.md)
  `CVE-2024-43453` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38262.md)
  `CVE-2024-38262` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-591
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38265.md)
  `CVE-2024-38265` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption, CWE-20, CWE-126
- [Windows Netlogon Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38124.md)
  `CVE-2024-38124` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2024 · Tags: Authentication bypass
- [BranchCache Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-38149.md)
  `CVE-2024-38149` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-37983.md)
  `CVE-2024-37983` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-37979.md)
  `CVE-2024-37979` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-37982.md)
  `CVE-2024-37982` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-37976.md)
  `CVE-2024-37976` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43607.md)
  `CVE-2024-43607` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43608.md)
  `CVE-2024-43608` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows MSHTML Platform Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43573.md)
  `CVE-2024-43573` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.46 · Not analysed yet · Published 8 Oct 2024 · Tags: Cross-site scripting (XSS)
- [Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43541.md)
  `CVE-2024-43541` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43535.md)
  `CVE-2024-43535` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-43534.md)
  `CVE-2024-43534` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Remote Registry Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43532.md)
  `CVE-2024-43532` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-636
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43519.md)
  `CVE-2024-43519` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-197
- [Windows Telephony Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43518.md)
  `CVE-2024-43518` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43515.md)
  `CVE-2024-43515` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43513.md)
  `CVE-2024-43513` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-693
- [BranchCache Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43506.md)
  `CVE-2024-43506` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38261.md)
  `CVE-2024-38261` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption, CWE-20, CWE-126
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43487.md)
  `CVE-2024-43487` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-693
- [Windows Security Zone Mapping Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-30073.md)
  `CVE-2024-30073` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-41
- [Windows MSHTML Platform Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43461.md)
  `CVE-2024-43461` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-451
- [Windows Remote Desktop Licensing Service Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43455.md)
  `CVE-2024-43455` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-20
- [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43454.md)
  `CVE-2024-43454` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.22 · Not analysed yet · Published 10 Sept 2024 · Tags: Path traversal
- [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38263.md)
  `CVE-2024-38263` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-591
- [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38260.md)
  `CVE-2024-38260` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Windows Remote Desktop Licensing Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-38258.md)
  `CVE-2024-38258` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Path traversal
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38247.md)
  `CVE-2024-38247` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38245.md)
  `CVE-2024-38245` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-20
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38239.md)
  `CVE-2024-38239` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2024 · Tags: Authentication bypass
- [Windows Networking Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-38234.md)
  `CVE-2024-38234` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-20
- [Windows Remote Desktop Licensing Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-38231.md)
  `CVE-2024-38231` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Broken access control
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38217.md)
  `CVE-2024-38217` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.4 Medium · Critical (KEV) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-693
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38014.md)
  `CVE-2024-38014` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Sept 2024 · Tags: Privilege escalation
- [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43467.md)
  `CVE-2024-43467` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2024 · Tags: Race condition
- [Windows Kernel-Mode Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-38256.md)
  `CVE-2024-38256` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI0LTA5LTEwVDE2OjUzOjQ5LjE2MzAwMFoiLCJDVkUtMjAyNC0zODI1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI0LTEwLTA4VDE3OjM2OjEwLjMzOTAwMFoiLCJDVkUtMjAyNC00MzU3MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI0LTEwLTA4VDE3OjM2OjEwLjMzOTAwMFoiLCJDVkUtMjAyNC00MzU3MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.
