Windows Server 2016 Security Vulnerabilities and Issues — Page 7 of Windows Server 2016 CVE List

Lucene search

MicrosoftWindows Server 2016

4166 matches found

CVE•added 2025/06/10 5:22 p.m.•264 views

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

8.8CVSS8.8AI score0.16466EPSS

CVE•added 2020/05/21 11:15 p.m.•263 views

CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.

7.8CVSS7.7AI score0.72379EPSS

CVE•added 2024/04/09 5:15 p.m.•263 views

CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.85132EPSS

CVE•added 2020/01/14 11:15 p.m.•262 views

CVE-2020-0624

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.

7.8CVSS7.7AI score0.15527EPSS

CVE•added 2022/04/15 7:15 p.m.•261 views

CVE-2022-24545

Windows Kerberos Remote Code Execution Vulnerability

8.1CVSS9AI score0.04077EPSS

CVE•added 2023/04/11 9:15 p.m.•258 views

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.06926EPSS

CVE•added 2021/08/12 6:15 p.m.•257 views

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

9.9CVSS8.8AI score0.09829EPSS

CVE•added 2022/05/10 9:15 p.m.•256 views

CVE-2022-26931

Windows Kerberos Elevation of Privilege Vulnerability

7.5CVSS8.5AI score0.00786EPSS

CVE•added 2023/11/14 6:15 p.m.•256 views

CVE-2023-36405

Windows Kernel Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00119EPSS

CVE•added 2024/03/12 5:15 p.m.•256 views

CVE-2024-21427

Windows Kerberos Security Feature Bypass Vulnerability

7.5CVSS7.7AI score0.01776EPSS

CVE•added 2024/04/09 5:15 p.m.•256 views

CVE-2024-26207

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00375EPSS

CVE•added 2019/04/09 9:29 p.m.•255 views

CVE-2019-0685

7.8CVSS8.2AI score0.84886EPSS

CVE•added 2022/04/15 7:15 p.m.•255 views

CVE-2022-24497

Windows Network File System Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.39064EPSS

CVE•added 2018/12/12 12:29 a.m.•253 views

CVE-2018-8639

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.4CVSS8.5AI score0.20396EPSS

CVE•added 2021/09/15 12:15 p.m.•253 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

CVE•added 2022/05/10 9:15 p.m.•253 views

CVE-2022-26939

Storage Spaces Direct Elevation of Privilege Vulnerability

7CVSS7.3AI score0.00388EPSS

CVE•added 2024/01/09 6:15 p.m.•253 views

CVE-2024-20652

Windows HTML Platforms Security Feature Bypass Vulnerability

8.1CVSS8AI score0.02334EPSS

CVE•added 2022/03/09 5:15 p.m.•252 views

CVE-2022-23284

Windows Print Spooler Elevation of Privilege Vulnerability

9CVSS7.7AI score0.09081EPSS

CVE•added 2023/02/28 6:15 p.m.•252 views

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

5.5CVSS6.5AI score0.00151EPSS

CVE•added 2023/04/11 9:15 p.m.•252 views

CVE-2023-28250

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.05623EPSS

CVE•added 2019/06/12 2:29 p.m.•251 views

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features.To exploit t...

5.9CVSS6.7AI score0.9061EPSS

CVE•added 2022/09/13 7:15 p.m.•249 views

CVE-2022-30170

Windows Credential Roaming Service Elevation of Privilege Vulnerability

7.3CVSS8.3AI score0.00826EPSS

CVE•added 2024/08/13 6:15 p.m.•249 views

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS5.2AI score0.00458EPSS

CVE•added 2024/08/13 6:15 p.m.•247 views

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.68971EPSS

CVE•added 2024/03/12 5:15 p.m.•246 views

CVE-2024-21437

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.05247EPSS

CVE•added 2019/08/14 9:15 p.m.•245 views

CVE-2019-1226

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...

10CVSS9.7AI score0.13718EPSS

CVE•added 2020/07/14 11:15 p.m.•245 views

CVE-2020-1036

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040,...

9CVSS9.2AI score0.01001EPSS

CVE•added 2021/09/15 12:15 p.m.•245 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00307EPSS

CVE•added 2023/04/11 9:15 p.m.•245 views

CVE-2023-21729

Remote Procedure Call Runtime Information Disclosure Vulnerability

5.3CVSS4.9AI score0.01489EPSS

CVE•added 2024/08/13 6:15 p.m.•245 views

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability

6.5CVSS6.5AI score0.73855EPSS

CVE•added 2018/08/15 5:29 p.m.•244 views

CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers...

7.8CVSS7.9AI score0.39182EPSS

CVE•added 2020/08/17 7:15 p.m.•243 views

CVE-2020-1337

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; ...

7.8CVSS7.8AI score0.53476EPSS

CVE•added 2022/03/09 5:15 p.m.•243 views

CVE-2022-23293

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00389EPSS

CVE•added 2022/05/10 9:15 p.m.•243 views

CVE-2022-29120

Windows Clustered Shared Volume Information Disclosure Vulnerability

6.5CVSS7.6AI score0.00607EPSS

CVE•added 2023/01/10 10:15 p.m.•243 views

CVE-2023-21549

Windows SMB Witness Service Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.02197EPSS

CVE•added 2022/05/18 11:15 p.m.•242 views

CVE-2022-30138

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00447EPSS

CVE•added 2024/03/12 5:15 p.m.•242 views

CVE-2024-21433

Windows Print Spooler Elevation of Privilege Vulnerability

7CVSS8AI score0.01498EPSS

CVE•added 2018/05/09 7:29 p.m.•241 views

CVE-2018-8166

7CVSS7.4AI score0.94013EPSS

CVE•added 2019/07/15 7:15 p.m.•241 views

CVE-2019-1073

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.

5.5CVSS5.8AI score0.00349EPSS

CVE•added 2024/03/12 5:15 p.m.•241 views

CVE-2024-26166

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01432EPSS

CVE•added 2021/08/12 6:15 p.m.•240 views

CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

9.8CVSS8.8AI score0.10206EPSS

CVE•added 2024/02/13 6:15 p.m.•240 views

CVE-2024-21358

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.0192EPSS

CVE•added 2024/02/13 6:15 p.m.•240 views

CVE-2024-21372

Windows OLE Remote Code Execution Vulnerability

8.8CVSS9AI score0.0153EPSS

CVE•added 2024/03/12 5:15 p.m.•240 views

CVE-2024-26162

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.02189EPSS

CVE•added 2024/08/13 6:15 p.m.•240 views

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

7.5CVSS7.4AI score0.18494EPSS

CVE•added 2018/05/09 7:29 p.m.•239 views

CVE-2018-8124

7CVSS7.4AI score0.94013EPSS

CVE•added 2020/06/09 8:15 p.m.•239 views

CVE-2020-1307

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

9.3CVSS7.7AI score0.19295EPSS

CVE•added 2021/05/11 7:15 p.m.•239 views

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0033EPSS

CVE•added 2024/02/13 6:15 p.m.•239 views

CVE-2024-21350

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.0061EPSS

CVE•added 2024/02/13 6:15 p.m.•239 views

CVE-2024-21370

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability