# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [MS-EVEN RPC Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29969.md)
  `CVE-2025-29969` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: Race condition
- [Active Directory Certificate Services (AD CS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-29968.md)
  `CVE-2025-29968` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-20
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29967.md)
  `CVE-2025-29967` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29966.md)
  `CVE-2025-29966` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29960.md)
  `CVE-2025-29960` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29959.md)
  `CVE-2025-29959` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29810.md)
  `CVE-2025-29810` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control
- [Windows Resilient File System (ReFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27738.md)
  `CVE-2025-27738` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control
- [Windows Security Zone Mapping Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-27737.md)
  `CVE-2025-27737` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27733.md)
  `CVE-2025-27733` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27732.md)
  `CVE-2025-27732` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27727.md)
  `CVE-2025-27727` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Path traversal
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27486.md)
  `CVE-2025-27486` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27487.md)
  `CVE-2025-27487` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27483.md)
  `CVE-2025-27483` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27481.md)
  `CVE-2025-27481` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27480.md)
  `CVE-2025-27480` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27484.md)
  `CVE-2025-27484` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27485.md)
  `CVE-2025-27485` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27469.md)
  `CVE-2025-27469` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [RPC Endpoint Mapper Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26679.md)
  `CVE-2025-26679` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26676.md)
  `CVE-2025-26676` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26673.md)
  `CVE-2025-26673` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26672.md)
  `CVE-2025-26672` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26671.md)
  `CVE-2025-26671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591
- [Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26670.md)
  `CVE-2025-26670` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26652.md)
  `CVE-2025-26652` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26647.md)
  `CVE-2025-26647` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26648.md)
  `CVE-2025-26648` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591
- [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26641.md)
  `CVE-2025-26641` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26637.md)
  `CVE-2025-26637` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-693
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21222.md)
  `CVE-2025-21222` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21221.md)
  `CVE-2025-21221` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Process Activation Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21204.md)
  `CVE-2025-21204` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21203.md)
  `CVE-2025-21203` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21205.md)
  `CVE-2025-21205` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21191.md)
  `CVE-2025-21191` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21197.md)
  `CVE-2025-21197` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21174.md)
  `CVE-2025-21174` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29824.md)
  `CVE-2025-29824` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.19 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27742.md)
  `CVE-2025-27742` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27741.md)
  `CVE-2025-27741` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Active Directory Certificate Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27740.md)
  `CVE-2025-27740` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Authentication bypass
- [Kerberos Key Distribution Proxy Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27479.md)
  `CVE-2025-27479` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-410
- [Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27478.md)
  `CVE-2025-27478` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27477.md)
  `CVE-2025-27477` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27474.md)
  `CVE-2025-27474` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-27472.md)
  `CVE-2025-27472` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-693
- [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27473.md)
  `CVE-2025-27473` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27470.md)
  `CVE-2025-27470` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Microsoft Streaming Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27471.md)
  `CVE-2025-27471` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26688.md)
  `CVE-2025-26688` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26687.md)
  `CVE-2025-26687` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26686.md)
  `CVE-2025-26686` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26680.md)
  `CVE-2025-26680` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26668.md)
  `CVE-2025-26668` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26667.md)
  `CVE-2025-26667` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26669.md)
  `CVE-2025-26669` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows upnphost.dll Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26665.md)
  `CVE-2025-26665` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26664.md)
  `CVE-2025-26664` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI1LTA0LTA4VDE3OjIzOjA1LjU3OTAwMFoiLCJDVkUtMjAyNS0yNjY2NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI1LTA1LTEzVDE2OjU4OjQ3LjI2MjAwMFoiLCJDVkUtMjAyNS0yNzQ2OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI1LTA1LTEzVDE2OjU4OjQ3LjI2MjAwMFoiLCJDVkUtMjAyNS0yNzQ2OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.