# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59275.md)
  `CVE-2025-59275` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption, CWE-1287
- [Windows Search Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59253.md)
  `CVE-2025-59253` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59230.md)
  `CVE-2025-59230` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-59244.md)
  `CVE-2025-59244` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Path traversal
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-59214.md)
  `CVE-2025-59214` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-59209.md)
  `CVE-2025-59209` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Windows MapUrlToZone Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-59208.md)
  `CVE-2025-59208` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59205.md)
  `CVE-2025-59205` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition
- [Windows Search Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59198.md)
  `CVE-2025-59198` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-20
- [Windows Search Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59190.md)
  `CVE-2025-59190` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-20
- [Microsoft Failover Cluster Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-59188.md)
  `CVE-2025-59188` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59187.md)
  `CVE-2025-59187` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption, CWE-20
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-58739.md)
  `CVE-2025-58739` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Remote Desktop Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58737.md)
  `CVE-2025-58737` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58736.md)
  `CVE-2025-58736` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58733.md)
  `CVE-2025-58733` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58730.md)
  `CVE-2025-58730` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-58729.md)
  `CVE-2025-58729` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-58726.md)
  `CVE-2025-58726` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [Windows COM+ Event System Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-58725.md)
  `CVE-2025-58725` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58718.md)
  `CVE-2025-58718` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-58714.md)
  `CVE-2025-58714` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [Windows WLAN AutoConfig Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-55695.md)
  `CVE-2025-55695` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55692.md)
  `CVE-2025-55692` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-20
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55678.md)
  `CVE-2025-55678` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [PowerShell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-25004.md)
  `CVE-2025-25004` · CVE record: Microsoft PowerShell 7.4 and 4 more · CVSS 7.3 High · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [Windows URL Parsing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-59295.md)
  `CVE-2025-59295` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-59282.md)
  `CVE-2025-59282` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition, Memory corruption
- [Windows SMB Client Tampering Vulnerability](https://agentprime.io/advisories/CVE-2025-59280.md)
  `CVE-2025-59280` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Authentication bypass
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59277.md)
  `CVE-2025-59277` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59259.md)
  `CVE-2025-59259` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-59258.md)
  `CVE-2025-59258` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59242.md)
  `CVE-2025-59242` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-59211.md)
  `CVE-2025-59211` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59202.md)
  `CVE-2025-59202` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59201.md)
  `CVE-2025-59201` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Broken access control
- [Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59196.md)
  `CVE-2025-59196` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition, Memory corruption
- [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-59185.md)
  `CVE-2025-59185` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Path traversal
- [Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58735.md)
  `CVE-2025-58735` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-58732.md)
  `CVE-2025-58732` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-58717.md)
  `CVE-2025-58717` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55701.md)
  `CVE-2025-55701` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-55700.md)
  `CVE-2025-55700` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55687.md)
  `CVE-2025-55687` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition, Memory corruption
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55335.md)
  `CVE-2025-55335` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition, Memory corruption
- [Windows Agere Modem Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24052.md)
  `CVE-2025-24052` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows Agere Modem Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24990.md)
  `CVE-2025-24990` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption
- [Windows SMB Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55234.md)
  `CVE-2025-55234` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.21 · Not analysed yet · Published 9 Sept 2025 · Tags: Authentication bypass
- [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-54917.md)
  `CVE-2025-54917` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-693
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54915.md)
  `CVE-2025-54915` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows BitLocker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54912.md)
  `CVE-2025-54912` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows BitLocker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54911.md)
  `CVE-2025-54911` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.3 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-54113.md)
  `CVE-2025-54113` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54109.md)
  `CVE-2025-54109` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-54107.md)
  `CVE-2025-54107` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-41
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54104.md)
  `CVE-2025-54104` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54098.md)
  `CVE-2025-54098` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Broken access control
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54094.md)
  `CVE-2025-54094` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows TCP/IP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54093.md)
  `CVE-2025-54093` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54091.md)
  `CVE-2025-54091` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI1LTA5LTA5VDE3OjAxOjE3Ljc0MjAwMFoiLCJDVkUtMjAyNS01NDA5MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI1LTEwLTE0VDE3OjAxOjQ2LjM2NTAwMFoiLCJDVkUtMjAyNS01OTI3OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI1LTEwLTE0VDE3OjAxOjQ2LjM2NTAwMFoiLCJDVkUtMjAyNS01OTI3OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.