Windows Server 2016 Security Vulnerabilities and Issues — Page 74 of Windows Server 2016 CVE List

6.5CVSS6.2AI score0.29411EPSS

CVE-2020-0774

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0874, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.

7.8CVSS8.5AI score0.0037EPSS

CVE-2020-0808

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'.

7.8CVSS7.6AI score0.00538EPSS

CVE-2020-0864

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0865, CVE-2020-0866, CVE-2...

7.8CVSS8.1AI score0.00526EPSS

CVE-2020-0898

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.

CVE•added 2020/09/11 5:15 p.m.•76 views

CVE-2020-1033

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.An authenticated attacker could exploit this vulnerability by runni...

5.5CVSS4.2AI score0.01063EPSS

CVE•added 2020/05/21 11:15 p.m.•76 views

CVE-2020-1087

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1114.

7.8CVSS8.5AI score0.00278EPSS

CVE•added 2020/09/11 5:15 p.m.•76 views

CVE-2020-1228

A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to...

7.5CVSS7.6AI score0.1594EPSS

CVE•added 2020/07/14 11:15 p.m.•76 views

CVE-2020-1396

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulne...

7.8CVSS8.4AI score0.00513EPSS

CVE•added 2020/07/14 11:15 p.m.•76 views

CVE-2020-1402

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'.

7.8CVSS8.6AI score0.00319EPSS

CVE•added 2020/07/14 11:15 p.m.•76 views

CVE-2020-1413

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1414, CVE-2020-141...

7.8CVSS7.7AI score0.00513EPSS

CVE•added 2020/09/11 5:15 p.m.•76 views

CVE-2020-1590

An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.To exploit the vulnerability, an attacker would ...

7.8CVSS7.2AI score0.00451EPSS

CVE•added 2020/11/11 7:15 a.m.•76 views

CVE-2020-17026

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00514EPSS

CVE•added 2021/03/11 4:15 p.m.•76 views

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00387EPSS

CVE•added 2021/03/11 4:15 p.m.•76 views

CVE-2021-26878

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00378EPSS

CVE•added 2021/12/15 3:15 p.m.•76 views

CVE-2021-43237

Windows Setup Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00719EPSS

CVE•added 2023/12/12 6:15 p.m.•76 views

CVE-2023-35622

Windows DNS Spoofing Vulnerability

7.5CVSS7.9AI score0.00282EPSS

CVE•added 2023/12/12 6:15 p.m.•76 views

CVE-2023-36011

Win32k Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00102EPSS

7.5CVSS7.9AI score0.21089EPSS

CVE-2024-43506

BranchCache Denial of Service Vulnerability

7CVSS7.6AI score0.00151EPSS

CVE-2024-43511

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.00514EPSS

CVE-2024-43556

Windows Graphics Component Elevation of Privilege Vulnerability

8.8CVSS9.1AI score0.05181EPSS

CVE-2024-43607

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE•added 2025/04/08 6:15 p.m.•76 views

CVE-2025-21205

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

8.8CVSS8AI score0.00147EPSS

CVE•added 2025/04/08 6:15 p.m.•76 views

CVE-2025-24073

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.00161EPSS

CVE•added 2025/04/08 6:15 p.m.•76 views

CVE-2025-26669

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

8.8CVSS6.7AI score0.00147EPSS

CVE•added 2025/04/08 6:16 p.m.•76 views

CVE-2025-27737

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

8.6CVSS7.1AI score0.0023EPSS

CVE•added 2016/11/10 6:59 a.m.•75 views

CVE-2016-3333

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted appl...

9.3CVSS7.5AI score0.1385EPSS

CVE•added 2017/04/12 2:59 p.m.•75 views

CVE-2017-0178

A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial ...

5.4CVSS5.4AI score0.00584EPSS

CVE•added 2017/04/12 2:59 p.m.•75 views

CVE-2017-0185

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Deni...

6.3CVSS5.4AI score0.00584EPSS

CVE•added 2017/06/15 1:29 a.m.•75 views

CVE-2017-0219

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy...

5.3CVSS5.3AI score0.5143EPSS

CVE•added 2017/11/15 3:29 a.m.•75 views

CVE-2017-11842

Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, a...

4.7CVSS5.2AI score0.08412EPSS

CVE•added 2017/06/15 1:29 a.m.•75 views

CVE-2017-8471

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializ...

5CVSS4.7AI score0.15731EPSS

CVE•added 2017/08/08 9:29 p.m.•75 views

CVE-2017-8633

Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Priv...

8.5CVSS8AI score0.14516EPSS

5.5CVSS5.2AI score0.00996EPSS

CVE-2020-0676

7.8CVSS8.1AI score0.0037EPSS

CVE-2020-0701

An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00549EPSS

CVE-2020-0715

7.8CVSS7.7AI score0.00549EPSS

CVE-2020-0723

5.5CVSS6.3AI score0.13946EPSS

CVE-2020-0728

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

CVE•added 2020/03/12 4:15 p.m.•75 views

CVE-2020-0880

6.5CVSS6.2AI score0.29411EPSS

CVE•added 2020/03/12 4:15 p.m.•75 views

CVE-2020-0885

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.

4.3CVSS5.9AI score0.08498EPSS

CVE•added 2020/04/15 3:15 p.m.•75 views

CVE-2020-0918

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0917.

7.4CVSS7.4AI score0.01196EPSS

CVE•added 2020/04/15 3:15 p.m.•75 views

CVE-2020-0944

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029.

7.8CVSS7.7AI score0.00538EPSS

6.1CVSS6.7AI score0.00713EPSS

CVE-2020-1055

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.

7.8CVSS8.5AI score0.0038EPSS

CVE-2020-1078

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS8.5AI score0.00274EPSS

CVE-2020-1132

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

7.8CVSS7.7AI score0.12134EPSS

CVE-2020-1149

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1151, CVE-2020-115...

7.8CVSS7.7AI score0.12134EPSS

CVE-2020-1151

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-115...