# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows iSCSI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69598.md)
  `CVE-2026-69598` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows WebClient Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72965.md)
  `CVE-2026-72965` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Port Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69381.md)
  `CVE-2026-69381` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-81955.md)
  `CVE-2026-81955` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-80096.md)
  `CVE-2026-80096` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-78516.md)
  `CVE-2026-78516` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69595.md)
  `CVE-2026-69595` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Windows SCSI Class System File Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-78453.md)
  `CVE-2026-78453` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-78449.md)
  `CVE-2026-78449` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Distributed File System (DFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-78446.md)
  `CVE-2026-78446` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-78445.md)
  `CVE-2026-78445` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Management Instrumentation Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-77905.md)
  `CVE-2026-77905` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [DirectWrite Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-73016.md)
  `CVE-2026-73016` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows iSCSI Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-73025.md)
  `CVE-2026-73025` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-73013.md)
  `CVE-2026-73013` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-73023.md)
  `CVE-2026-73023` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-73009.md)
  `CVE-2026-73009` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-73012.md)
  `CVE-2026-73012` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-73024.md)
  `CVE-2026-73024` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows URL Moniker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-73019.md)
  `CVE-2026-73019` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-41
- [Graphic Fonts Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-73018.md)
  `CVE-2026-73018` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DNS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72987.md)
  `CVE-2026-72987` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Volume Shadow Copy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72985.md)
  `CVE-2026-72985` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70570.md)
  `CVE-2026-70570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70296.md)
  `CVE-2026-70296` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Media Player Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70203.md)
  `CVE-2026-70203` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69441.md)
  `CVE-2026-69441` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Race condition, Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69601.md)
  `CVE-2026-69601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69590.md)
  `CVE-2026-69590` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69607.md)
  `CVE-2026-69607` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Storage Spaces Controller Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69568.md)
  `CVE-2026-69568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69564.md)
  `CVE-2026-69564` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Work Folder Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69560.md)
  `CVE-2026-69560` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69510.md)
  `CVE-2026-69510` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69499.md)
  `CVE-2026-69499` · CVE record: Microsoft Microsoft Office 365 for Mac and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69490.md)
  `CVE-2026-69490` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows VOLSNAP.SYS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69426.md)
  `CVE-2026-69426` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69395.md)
  `CVE-2026-69395` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69311.md)
  `CVE-2026-69311` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69334.md)
  `CVE-2026-69334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69291.md)
  `CVE-2026-69291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69290.md)
  `CVE-2026-69290` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69309.md)
  `CVE-2026-69309` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69287.md)
  `CVE-2026-69287` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Network Connection Broker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72967.md)
  `CVE-2026-72967` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-72966.md)
  `CVE-2026-72966` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72954.md)
  `CVE-2026-72954` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72959.md)
  `CVE-2026-72959` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72950.md)
  `CVE-2026-72950` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72957.md)
  `CVE-2026-72957` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72942.md)
  `CVE-2026-72942` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72932.md)
  `CVE-2026-72932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72933.md)
  `CVE-2026-72933` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-72931.md)
  `CVE-2026-72931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Winsock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72927.md)
  `CVE-2026-72927` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71352.md)
  `CVE-2026-71352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-71342.md)
  `CVE-2026-71342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71349.md)
  `CVE-2026-71349` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70568.md)
  `CVE-2026-70568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability](https://agentprime.io/advisories/CVE-2026-70574.md)
  `CVE-2026-70574` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI2LTA5LTA4VDE3OjE2OjU0LjczNDAwMFoiLCJDVkUtMjAyNi03MDU3NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI2LTA5LTA4VDE3OjE5OjIwLjcxMTAwMFoiLCJDVkUtMjAyNi03MDE0NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI2LTA5LTA4VDE3OjE5OjIwLjcxMTAwMFoiLCJDVkUtMjAyNi03MDE0NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.