# Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20848.md)
  `CVE-2026-20848` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20843.md)
  `CVE-2026-20843` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20940.md)
  `CVE-2026-20940` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20934.md)
  `CVE-2026-20934` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows SMB Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20927.md)
  `CVE-2026-20927` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20926.md)
  `CVE-2026-20926` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-20925.md)
  `CVE-2026-20925` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · EPSS 0.18 · Not analysed yet · Published 13 Jan 2026 · Tags: Path traversal
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20922.md)
  `CVE-2026-20922` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20921.md)
  `CVE-2026-20921` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20919.md)
  `CVE-2026-20919` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20875.md)
  `CVE-2026-20875` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20869.md)
  `CVE-2026-20869` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20860.md)
  `CVE-2026-20860` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Server Update Service (WSUS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20856.md)
  `CVE-2026-20856` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-20
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-20847.md)
  `CVE-2026-20847` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20840.md)
  `CVE-2026-20840` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20839.md)
  `CVE-2026-20839` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Windows Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-20834.md)
  `CVE-2026-20834` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Path traversal, Information disclosure
- [Windows Kerberos Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20833.md)
  `CVE-2026-20833` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20831.md)
  `CVE-2026-20831` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows rndismp6.sys Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20828.md)
  `CVE-2026-20828` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Remote Assistance Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20824.md)
  `CVE-2026-20824` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-693
- [Remote Procedure Call Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20821.md)
  `CVE-2026-20821` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20820.md)
  `CVE-2026-20820` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20816.md)
  `CVE-2026-20816` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Kernel Memory Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20809.md)
  `CVE-2026-20809` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, Race condition
- [Desktop Window Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20805.md)
  `CVE-2026-20805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-0386.md)
  `CVE-2026-0386` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Secure Boot Certificate Expiration Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21265.md)
  `CVE-2026-21265` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-1329
- [PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-54100.md)
  `CVE-2025-54100` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Command injection
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-64678.md)
  `CVE-2025-64678` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-62567.md)
  `CVE-2025-62567` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62474.md)
  `CVE-2025-62474` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Broken access control
- [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62455.md)
  `CVE-2025-62455` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-20
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62571.md)
  `CVE-2025-62571` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-20
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62549.md)
  `CVE-2025-62549` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-62473.md)
  `CVE-2025-62473` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-126
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62472.md)
  `CVE-2025-62472` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62470.md)
  `CVE-2025-62470` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Client-Side Caching Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62466.md)
  `CVE-2025-62466` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62458.md)
  `CVE-2025-62458` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62213.md)
  `CVE-2025-62213` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60724.md)
  `CVE-2025-60724` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60720.md)
  `CVE-2025-60720` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-126
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60715.md)
  `CVE-2025-60715` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows OLE Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60714.md)
  `CVE-2025-60714` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59514.md)
  `CVE-2025-59514` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Privilege escalation
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62452.md)
  `CVE-2025-62452` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62217.md)
  `CVE-2025-62217` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60719.md)
  `CVE-2025-60719` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60709.md)
  `CVE-2025-60709` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Client-Side Caching Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60705.md)
  `CVE-2025-60705` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Broken access control
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60704.md)
  `CVE-2025-60704` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-325
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60703.md)
  `CVE-2025-60703` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59512.md)
  `CVE-2025-59512` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Broken access control
- [Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59510.md)
  `CVE-2025-59510` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Path traversal
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59506.md)
  `CVE-2025-59506` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition
- [Windows Smart Card Reader Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59505.md)
  `CVE-2025-59505` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Server Update Service (WSUS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-59287.md)
  `CVE-2025-59287` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 14 Oct 2025 · Tags: Insecure deserialization
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59278.md)
  `CVE-2025-59278` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation.md?cursor=WyIyMDI1LTEwLTE0VDE3OjAxOjQ2LjM2NTAwMFoiLCJDVkUtMjAyNS01OTI3OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2-server-core-installation&cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjUzLjgzMzAwMFoiLCJDVkUtMjAyNi0yMDg0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2-server-core-installation/?cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjUzLjgzMzAwMFoiLCJDVkUtMjAyNi0yMDg0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.