# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft XML Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-57097.md)
  `CVE-2026-57097` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-426
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-50694.md)
  `CVE-2026-50694` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Active Directory Federation Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-56155.md)
  `CVE-2026-56155` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-1220
- [Windows GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54122.md)
  `CVE-2026-54122` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54995.md)
  `CVE-2026-54995` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55003.md)
  `CVE-2026-55003` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54999.md)
  `CVE-2026-54999` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows SMB Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-54997.md)
  `CVE-2026-54997` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54119.md)
  `CVE-2026-54119` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54982.md)
  `CVE-2026-54982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54992.md)
  `CVE-2026-54992` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Configuration Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55004.md)
  `CVE-2026-55004` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54107.md)
  `CVE-2026-54107` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50697.md)
  `CVE-2026-50697` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54987.md)
  `CVE-2026-54987` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54989.md)
  `CVE-2026-54989` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50695.md)
  `CVE-2026-50695` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54983.md)
  `CVE-2026-54983` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-49177.md)
  `CVE-2026-49177` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49164.md)
  `CVE-2026-49164` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [SQL Server ODBC driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42990.md)
  `CVE-2026-42990` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Bluetooth Port Driver Remote Code Execution](https://agentprime.io/advisories/CVE-2026-42975.md)
  `CVE-2026-42975` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34346.md)
  `CVE-2026-34346` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Weak cryptography or TLS
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-44812.md)
  `CVE-2026-44812` · CVE record: Microsoft Microsoft Excel for Android and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-44803.md)
  `CVE-2026-44803` · CVE record: Microsoft Microsoft Excel for Android and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Deployment Services (WDS) Remote Code Execution](https://agentprime.io/advisories/CVE-2026-42987.md)
  `CVE-2026-42987` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42985.md)
  `CVE-2026-42985` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-44801.md)
  `CVE-2026-44801` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DHCP Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44815.md)
  `CVE-2026-44815` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-44799.md)
  `CVE-2026-44799` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Winlogon Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42989.md)
  `CVE-2026-42989` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal
- [Microsoft Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42986.md)
  `CVE-2026-42986` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42970.md)
  `CVE-2026-42970` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42972.md)
  `CVE-2026-42972` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Telephony Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42968.md)
  `CVE-2026-42968` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-42914.md)
  `CVE-2026-42914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42912.md)
  `CVE-2026-42912` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42911.md)
  `CVE-2026-42911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [NT OS Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42916.md)
  `CVE-2026-42916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42909.md)
  `CVE-2026-42909` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [NT OS Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42980.md)
  `CVE-2026-42980` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42908.md)
  `CVE-2026-42908` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42905.md)
  `CVE-2026-42905` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-42903.md)
  `CVE-2026-42903` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42836.md)
  `CVE-2026-42836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-50507.md)
  `CVE-2026-50507` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Authentication bypass
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48574.md)
  `CVE-2026-48574` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Boot Manager Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-47656.md)
  `CVE-2026-47656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45658.md)
  `CVE-2026-45658` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45653.md)
  `CVE-2026-45653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45608.md)
  `CVE-2026-45608` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45603.md)
  `CVE-2026-45603` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45638.md)
  `CVE-2026-45638` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45635.md)
  `CVE-2026-45635` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-45602.md)
  `CVE-2026-45602` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-229, CWE-349
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45596.md)
  `CVE-2026-45596` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45636.md)
  `CVE-2026-45636` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-20
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45598.md)
  `CVE-2026-45598` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45601.md)
  `CVE-2026-45601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45599.md)
  `CVE-2026-45599` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjMzLjc3NzAwMFoiLCJDVkUtMjAyNi00NTU5OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjE4LjI1NzAwMFoiLCJDVkUtMjAyNi01Nzk3NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjE4LjI1NzAwMFoiLCJDVkUtMjAyNi01Nzk3NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.