Skip to content

Known vulnerabilities in Microsoft Windows Server 2012 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2025-47973 Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-49753 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-49735 Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network 8.1 High Jul 8, 2025
CVE-2025-49721 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-49716 Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network 7.5 High Jul 8, 2025
CVE-2025-49689 Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-49687 Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally 8.8 High Jul 8, 2025
CVE-2025-49686 Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-49676 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-49674 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-49672 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-49671 Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an… 6.5 Medium Jul 8, 2025
CVE-2025-49670 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium Jul 8, 2025
CVE-2025-49661 Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to… 7.8 High Jul 8, 2025
CVE-2025-49658 Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally 5.5 Medium Jul 8, 2025
CVE-2025-49657 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-48824 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Jul 8, 2025
CVE-2025-47987 Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges… 7.8 High Jul 8, 2025
CVE-2025-47986 Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally 8.8 High Jul 8, 2025
CVE-2025-47985 Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-47984 Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network 7.5 High Jul 8, 2025
CVE-2025-47976 Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-47971 Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-33073 Exploited Microsoft Windows SMB Client Improper Access Control Vulnerability 8.8 High Jun 10, 2025
CVE-2025-33070 Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network 8.1 High Jun 10, 2025

Other Microsoft products