# Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28898.md)
  `CVE-2024-28898` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28896.md)
  `CVE-2024-28896` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28923.md)
  `CVE-2024-28923` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28919.md)
  `CVE-2024-28919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28921.md)
  `CVE-2024-28921` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28922.md)
  `CVE-2024-28922` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26250.md)
  `CVE-2024-26250` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20689.md)
  `CVE-2024-20689` · CVE record: Microsoft Windows Server 2012 and 3 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20688.md)
  `CVE-2024-20688` · CVE record: Microsoft Windows Server 2012 and 3 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20669.md)
  `CVE-2024-20669` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26169.md)
  `CVE-2024-26169` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Mar 2024 · Tags: Privilege escalation
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21433.md)
  `CVE-2024-21433` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Race condition
- [Windows Update Stack Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21432.md)
  `CVE-2024-21432` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Path traversal
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21427.md)
  `CVE-2024-21427` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Authentication bypass
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21407.md)
  `CVE-2024-21407` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-26197.md)
  `CVE-2024-26197` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20
- [Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21430.md)
  `CVE-2024-21430` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Printing Service Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-21406.md)
  `CVE-2024-21406` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: Weak cryptography or TLS
- [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21405.md)
  `CVE-2024-21405` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-591
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21391.md)
  `CVE-2024-21391` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Windows DNS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21377.md)
  `CVE-2024-21377` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21370.md)
  `CVE-2024-21370` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21368.md)
  `CVE-2024-21368` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21367.md)
  `CVE-2024-21367` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21365.md)
  `CVE-2024-21365` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21363.md)
  `CVE-2024-21363` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21359.md)
  `CVE-2024-21359` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21356.md)
  `CVE-2024-21356` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21355.md)
  `CVE-2024-21355` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-591
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21348.md)
  `CVE-2024-21348` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21347.md)
  `CVE-2024-21347` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21344.md)
  `CVE-2024-21344` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21343.md)
  `CVE-2024-21343` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21420.md)
  `CVE-2024-21420` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21375.md)
  `CVE-2024-21375` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows OLE Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21372.md)
  `CVE-2024-21372` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21371.md)
  `CVE-2024-21371` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 13 Feb 2024 · Tags: Race condition
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21369.md)
  `CVE-2024-21369` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21366.md)
  `CVE-2024-21366` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21361.md)
  `CVE-2024-21361` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21360.md)
  `CVE-2024-21360` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21358.md)
  `CVE-2024-21358` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21357.md)
  `CVE-2024-21357` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21354.md)
  `CVE-2024-21354` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21352.md)
  `CVE-2024-21352` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21350.md)
  `CVE-2024-21350` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft ActiveX Data Objects Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21349.md)
  `CVE-2024-21349` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21340.md)
  `CVE-2024-21340` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-126
- [Windows Themes Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-21320.md)
  `CVE-2024-21320` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · EPSS 0.23 · Not analysed yet · Published 9 Jan 2024 · Tags: Information disclosure
- [Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20662.md)
  `CVE-2024-20662` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20655.md)
  `CVE-2024-20655` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows HTML Platforms Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20652.md)
  `CVE-2024-20652` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jan 2024 · Tags: Path traversal
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21307.md)
  `CVE-2024-21307` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Themes Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20691.md)
  `CVE-2024-20691` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Cryptographic Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20682.md)
  `CVE-2024-20682` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20658.md)
  `CVE-2024-20658` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows DNS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-35622.md)
  `CVE-2023-35622` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: Authentication bypass
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35633.md)
  `CVE-2023-35633` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Path traversal
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35632.md)
  `CVE-2023-35632` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35629.md)
  `CVE-2023-35629` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2.md?cursor=WyIyMDIzLTEyLTEyVDE4OjEwOjUyLjA1OTAwMFoiLCJDVkUtMjAyMy0zNTYyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2012-r2&cursor=WyIyMDI0LTA0LTA5VDE3OjAwOjE5Ljc5NDAwMFoiLCJDVkUtMjAyNC0yODkwMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2012-r2/?cursor=WyIyMDI0LTA0LTA5VDE3OjAwOjE5Ljc5NDAwMFoiLCJDVkUtMjAyNC0yODkwMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.
