Advisories · Technology

Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-50162 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50161 CVE record

CVSS 7.3 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50160 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50159 CVE record

CVSS 7.3 High

Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50158 CVE record

CVSS 7.0 High

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-50156 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50154 CVE record

CVSS 6.5 Medium

Microsoft Windows File Explorer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 12 Aug 2025
CVE-2025-50153 CVE record

CVSS 7.8 High

Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49762 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-49761 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49757 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49743 CVE record

CVSS 6.7 Medium

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49742 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49732 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49730 CVE record

CVSS 7.8 High

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-49729 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49727 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49722 CVE record

CVSS 5.7 Medium

Windows Print Spooler Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Jul 2025
CVE-2025-49684 CVE record

CVSS 5.5 Medium

Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-49683 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49681 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49679 CVE record

CVSS 7.8 High

Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Jul 2025
CVE-2025-49678 CVE record

CVSS 7.0 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49675 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49673 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49668 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49667 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49665 CVE record

CVSS 7.8 High

Workspace Broker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49664 CVE record

CVSS 5.5 Medium

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-49663 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49660 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49659 CVE record

CVSS 7.8 High

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-48821 CVE record

CVSS 7.1 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48819 CVE record

CVSS 7.1 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Jul 2025
CVE-2025-48817 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Path traversal
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-48816 CVE record

CVSS 7.8 High

HID Class Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48815 CVE record

CVSS 7.8 High

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48814 CVE record

CVSS 7.5 High

Remote Desktop Licensing Service Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
Not analysed yet 8 Jul 2025
CVE-2025-48808 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-48806 CVE record

CVSS 7.8 High

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48805 CVE record

CVSS 7.8 High

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48804 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-349
Not analysed yet 8 Jul 2025
CVE-2025-48001 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-47998 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47996 CVE record

CVSS 7.8 High

Windows MBT Transport Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47981 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47980 CVE record

CVSS 6.2 Medium

Windows Imaging Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-47975 CVE record

CVSS 7.0 High

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47973 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-49753 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49735 CVE record

CVSS 8.1 High

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49721 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49716 CVE record

CVSS 7.5 High

Windows Netlogon Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Denial of service
Not analysed yet 8 Jul 2025
CVE-2025-49689 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49688 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49687 CVE record

CVSS 8.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49686 CVE record

CVSS 7.8 High

Windows TCP/IP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49676 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49674 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025