Lucene search

K
MicrosoftWindows Server 2016

4166 matches found

CVE
CVE
added 2024/11/12 6:15 p.m.97 views

CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01494EPSS
CVE
CVE
added 2025/02/11 6:15 p.m.97 views

CVE-2025-21349

Windows Remote Desktop Configuration Service Tampering Vulnerability

6.8CVSS7.5AI score0.00091EPSS
CVE
CVE
added 2025/02/11 6:15 p.m.97 views

CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

7.1CVSS7.6AI score0.00167EPSS
CVE
CVE
added 2025/04/08 6:15 p.m.97 views

CVE-2025-26652

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

7.5CVSS7AI score0.12218EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.96 views

CVE-2017-0056

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win3...

7.8CVSS6AI score0.06734EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.96 views

CVE-2017-0104

The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."

9.3CVSS6.1AI score0.34862EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.96 views

CVE-2018-0887

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Win...

5.5CVSS5AI score0.02612EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.96 views

CVE-2018-8200

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. T...

5.3CVSS6.7AI score0.00231EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-0965

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

7.7CVSS8.6AI score0.00681EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.96 views

CVE-2019-1022

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS7.8AI score0.00299EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.96 views

CVE-2019-1060

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.

9.3CVSS9.3AI score0.22645EPSS
CVE
CVE
added 2019/07/15 7:15 p.m.96 views

CVE-2019-1097

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.

5.5CVSS5.8AI score0.0143EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-1163

A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.To exploit the vulnerability, an attacker could modify a signed CAB file and...

5.5CVSS7.4AI score0.02237EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-1177

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted ...

7CVSS7.3AI score0.00196EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.96 views

CVE-2019-1286

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1252.

6.5CVSS6.7AI score0.3045EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.96 views

CVE-2019-1321

An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL), aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00397EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.96 views

CVE-2019-1391

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207.

5.5CVSS7.2AI score0.00471EPSS
CVE
CVE
added 2020/01/24 9:15 p.m.96 views

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

5.5CVSS7.1AI score0.00281EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.96 views

CVE-2020-0709

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.

7.8CVSS7.8AI score0.00538EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.96 views

CVE-2020-0761

A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System AccountTo exploit the vulnerability, an authent...

8.8CVSS8.7AI score0.10549EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.96 views

CVE-2020-0784

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.

7.8CVSS8.1AI score0.00372EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.96 views

CVE-2020-0803

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0804, CVE-2020-0845.

7.8CVSS8.1AI score0.00549EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.96 views

CVE-2020-0988

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.96 views

CVE-2020-1253

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1310.

7.2CVSS7AI score0.00798EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.96 views

CVE-2020-1390

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.96 views

CVE-2020-1592

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...

4.4CVSS4.2AI score0.00433EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.96 views

CVE-2020-16935

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...

7.8CVSS8.2AI score0.00993EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.96 views

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00542EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.96 views

CVE-2021-24081

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01688EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.96 views

CVE-2021-24103

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00371EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.96 views

CVE-2021-28323

Windows DNS Information Disclosure Vulnerability

6.5CVSS7.1AI score0.12484EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.96 views

CVE-2021-42274

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

6.8CVSS7.4AI score0.00135EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.96 views

CVE-2022-26807

Windows Work Folder Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00127EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.96 views

CVE-2022-35832

Windows Event Tracing Denial of Service Vulnerability

5.5CVSS7.2AI score0.00107EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.96 views

CVE-2022-37996

Windows Kernel Memory Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00373EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.96 views

CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.00394EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.96 views

CVE-2023-35362

Windows Clip Service Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00076EPSS
CVE
CVE
added 2024/05/14 5:17 p.m.96 views

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.2AI score0.00385EPSS
CVE
CVE
added 2024/07/09 5:15 p.m.96 views

CVE-2024-38066

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00675EPSS
CVE
CVE
added 2024/11/12 6:15 p.m.96 views

CVE-2024-43636

Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00408EPSS
CVE
CVE
added 2025/02/11 6:15 p.m.96 views

CVE-2025-21254

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5CVSS7.3AI score0.00134EPSS
CVE
CVE
added 2025/01/14 6:15 p.m.96 views

CVE-2025-21270

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.01023EPSS
CVE
CVE
added 2025/01/14 6:15 p.m.96 views

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability

2.4CVSS3.6AI score0.00127EPSS
CVE
CVE
added 2025/01/14 6:15 p.m.96 views

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00133EPSS
CVE
CVE
added 2025/02/11 6:15 p.m.96 views

CVE-2025-21368

Microsoft Digest Authentication Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00487EPSS
CVE
CVE
added 2025/03/11 5:16 p.m.96 views

CVE-2025-26645

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8CVSS8.8AI score0.00608EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.95 views

CVE-2017-0289

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CV...

5CVSS5.1AI score0.24455EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.95 views

CVE-2017-8681

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects...

5.5CVSS5.4AI score0.26895EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.95 views

CVE-2018-0882

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-...

7CVSS7AI score0.07765EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.95 views

CVE-2018-0884

Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to how objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability". This CVE is unique from CVE-...

7.8CVSS7.2AI score0.00948EPSS
Total number of security vulnerabilities4166