Advisories · Technology

Microsoft Windows Server 2012 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-59196 CVE record

CVSS 7.0 High

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58735 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58732 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58717 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55701 CVE record

CVSS 7.8 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1287
Not analysed yet 14 Oct 2025
CVE-2025-55700 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55687 CVE record

CVSS 7.4 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55335 CVE record

CVSS 7.4 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-24052 CVE record

CVSS 7.8 High

Windows Agere Modem Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-24990 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Agere Modem Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55234 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows SMB Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 9 Sept 2025
CVE-2025-54917 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 9 Sept 2025
CVE-2025-54915 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54912 CVE record

CVSS 7.8 High

Windows BitLocker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54911 CVE record

CVSS 7.3 High

Windows BitLocker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54113 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54109 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54107 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 9 Sept 2025
CVE-2025-54104 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54098 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-54094 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54093 CVE record

CVSS 7.0 High

Windows TCP/IP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-54091 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53810 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53808 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53806 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53804 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 9 Sept 2025
CVE-2025-53803 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 9 Sept 2025
CVE-2025-53799 CVE record

CVSS 5.5 Medium

Windows Imaging Component Information Disclosure Vulnerability
- Microsoft Office for Android
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53796 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-55226 CVE record

CVSS 6.7 Medium

Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-55225 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54918 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 9 Sept 2025
CVE-2025-54916 CVE record

CVSS 7.8 High

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54895 CVE record

CVSS 7.8 High

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-54894 CVE record

CVSS 7.8 High

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54110 CVE record

CVSS 8.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54101 CVE record

CVSS 4.8 Medium

Windows SMB Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54099 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54097 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54096 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54095 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53798 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53797 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-55230 CVE record

CVSS 7.8 High

Windows MBT Transport Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 21 Aug 2025
CVE-2025-53778 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 12 Aug 2025
CVE-2025-50155 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50157 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53766 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

GDI+ Remote Code Execution Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53726 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53725 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53724 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53723 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-197
Not analysed yet 12 Aug 2025
CVE-2025-53722 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 12 Aug 2025
CVE-2025-53720 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53719 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53718 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53155 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53154 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53153 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025