# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45595.md)
  `CVE-2026-45595` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows Internet (wininet.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45592.md)
  `CVE-2026-45592` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45586.md)
  `CVE-2026-45586` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal
- [Windows NTLM Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-50508.md)
  `CVE-2026-50508` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · EPSS 0.11 · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48578.md)
  `CVE-2026-48578` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48576.md)
  `CVE-2026-48576` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48575.md)
  `CVE-2026-48575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48573.md)
  `CVE-2026-48573` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48570.md)
  `CVE-2026-48570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48568.md)
  `CVE-2026-48568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47653.md)
  `CVE-2026-47653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-47648.md)
  `CVE-2026-47648` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-426
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45588.md)
  `CVE-2026-45588` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Microsoft Kinect Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41092.md)
  `CVE-2026-41092` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [HTTP.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47291.md)
  `CVE-2026-47291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47289.md)
  `CVE-2026-47289` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Key Distribution Center (KDC) Remote Code Execution](https://agentprime.io/advisories/CVE-2026-47288.md)
  `CVE-2026-47288` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [UEFI Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45656.md)
  `CVE-2026-45656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45655.md)
  `CVE-2026-45655` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-45642.md)
  `CVE-2026-45642` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-20
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45634.md)
  `CVE-2026-45634` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-45606.md)
  `CVE-2026-45606` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45639.md)
  `CVE-2026-45639` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34335.md)
  `CVE-2026-34335` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40404.md)
  `CVE-2026-40404` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-197
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40409.md)
  `CVE-2026-40409` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-197
- [Windows DNS Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41108.md)
  `CVE-2026-41108` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40413.md)
  `CVE-2026-40413` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40403.md)
  `CVE-2026-40403` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40401.md)
  `CVE-2026-40401` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40398.md)
  `CVE-2026-40398` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-32209.md)
  `CVE-2026-32209` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Broken access control
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40397.md)
  `CVE-2026-40397` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40382.md)
  `CVE-2026-40382` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34341.md)
  `CVE-2026-34341` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34338.md)
  `CVE-2026-34338` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34334.md)
  `CVE-2026-34334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33838.md)
  `CVE-2026-33838` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Local Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33837.md)
  `CVE-2026-33837` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42825.md)
  `CVE-2026-42825` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Rich Text Edit Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-32170.md)
  `CVE-2026-32170` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-32161.md)
  `CVE-2026-32161` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Data Deduplication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41095.md)
  `CVE-2026-41095` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Netlogon Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41089.md)
  `CVE-2026-41089` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.78 · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40414.md)
  `CVE-2026-40414` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows SMB Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40410.md)
  `CVE-2026-40410` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows WAN ARP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40408.md)
  `CVE-2026-40408` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40407.md)
  `CVE-2026-40407` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-40406.md)
  `CVE-2026-40406` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40380.md)
  `CVE-2026-40380` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption, CWE-197
- [Microsoft Cryptographic Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40377.md)
  `CVE-2026-40377` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-35424.md)
  `CVE-2026-35424` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service
- [Windows 11 Telnet Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-35423.md)
  `CVE-2026-35423` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Driver Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-35422.md)
  `CVE-2026-35422` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Authentication bypass
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-35421.md)
  `CVE-2026-35421` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35420.md)
  `CVE-2026-35420` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35416.md)
  `CVE-2026-35416` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35415.md)
  `CVE-2026-35415` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34351.md)
  `CVE-2026-34351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34347.md)
  `CVE-2026-34347` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI2LTA1LTEyVDE2OjU4OjI2LjUxNTAwMFoiLCJDVkUtMjAyNi0zNDM0NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjMzLjc3NzAwMFoiLCJDVkUtMjAyNi00NTU5OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjMzLjc3NzAwMFoiLCJDVkUtMjAyNi00NTU5OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.