# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26183.md)
  `CVE-2026-26183` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26180.md)
  `CVE-2026-26180` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption
- [Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26174.md)
  `CVE-2026-26174` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Apr 2026 · Tags: Race condition, Memory corruption
- [Windows OLE Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26162.md)
  `CVE-2026-26162` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption
- [Remote Desktop Licensing Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26160.md)
  `CVE-2026-26160` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Authentication bypass
- [Windows Server Update Service (WSUS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-26154.md)
  `CVE-2026-26154` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-20
- [Remote Desktop Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-26151.md)
  `CVE-2026-26151` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-357
- [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-23674.md)
  `CVE-2026-23674` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-41
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26128.md)
  `CVE-2026-26128` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-26111.md)
  `CVE-2026-26111` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-25190.md)
  `CVE-2026-25190` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-426
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25188.md)
  `CVE-2026-25188` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Winlogon Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25187.md)
  `CVE-2026-25187` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Path traversal
- [Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-25186.md)
  `CVE-2026-25186` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Information disclosure
- [Windows Shell Link Processing Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-25185.md)
  `CVE-2026-25185` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Information disclosure
- [GDI+ Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-25181.md)
  `CVE-2026-25181` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-25180.md)
  `CVE-2026-25180` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25179.md)
  `CVE-2026-25179` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1287
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25178.md)
  `CVE-2026-25178` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25177.md)
  `CVE-2026-25177` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-641
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25176.md)
  `CVE-2026-25176` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Broken access control
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25175.md)
  `CVE-2026-25175` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Extensible File Allocation Table Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25174.md)
  `CVE-2026-25174` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-25173.md)
  `CVE-2026-25173` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-25172.md)
  `CVE-2026-25172` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25171.md)
  `CVE-2026-25171` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Graphics Component Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-25169.md)
  `CVE-2026-25169` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Denial of service
- [Windows Graphics Component Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-25168.md)
  `CVE-2026-25168` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Performance Counters for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25165.md)
  `CVE-2026-25165` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-24297.md)
  `CVE-2026-24297` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24296.md)
  `CVE-2026-24296` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24294.md)
  `CVE-2026-24294` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass
- [Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24291.md)
  `CVE-2026-24291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24289.md)
  `CVE-2026-24289` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24285.md)
  `CVE-2026-24285` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-23673.md)
  `CVE-2026-23673` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-23672.md)
  `CVE-2026-23672` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [RPC Runtime Library Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-23669.md)
  `CVE-2026-23669` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-23668.md)
  `CVE-2026-23668` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition
- [GDI+ Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20846.md)
  `CVE-2026-20846` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-126
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-21222.md)
  `CVE-2026-21222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Information disclosure
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21231.md)
  `CVE-2026-21231` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21238.md)
  `CVE-2026-21238` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21239.md)
  `CVE-2026-21239` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows NTLM Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-21249.md)
  `CVE-2026-21249` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 3.3 Low · EPSS 0.11 · Not analysed yet · Published 10 Feb 2026 · Tags: Path traversal
- [Mailslot File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21253.md)
  `CVE-2026-21253` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21508.md)
  `CVE-2026-21508` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Authentication bypass, CWE-426
- [Windows Remote Access Connection Manager Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-21525.md)
  `CVE-2026-21525` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Shell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21510.md)
  `CVE-2026-21510` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.61 · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-693
- [MSHTML Framework Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21513.md)
  `CVE-2026-21513` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.16 · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-693
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21533.md)
  `CVE-2026-21533` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Feb 2026 · Tags: Privilege escalation
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21236.md)
  `CVE-2026-21236` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21235.md)
  `CVE-2026-21235` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21246.md)
  `CVE-2026-21246` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows NDIS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20936.md)
  `CVE-2026-20936` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20931.md)
  `CVE-2026-20931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Path traversal
- [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20929.md)
  `CVE-2026-20929` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-20872.md)
  `CVE-2026-20872` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · EPSS 0.20 · Not analysed yet · Published 13 Jan 2026 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20868.md)
  `CVE-2026-20868` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20849.md)
  `CVE-2026-20849` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-807

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjUzLjgzMzAwMFoiLCJDVkUtMjAyNi0yMDg0OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI2LTA0LTE0VDE2OjU3OjEwLjE2OTAwMFoiLCJDVkUtMjAyNi0yNzkwOCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI2LTA0LTE0VDE2OjU3OjEwLjE2OTAwMFoiLCJDVkUtMjAyNi0yNzkwOCJd>. Everything for agents: <https://agentprime.io/llms.txt>.