Windows Server 2016 Security Vulnerabilities and Issues — Page 9 of Windows Server 2016 CVE List

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8401, CVE-2018-...

7.8CVSS7.7AI score0.14446EPSS

CVE•added 2019/09/11 10:15 p.m.•231 views

CVE-2019-1278

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1253, CVE-2019-1303.

7.8CVSS8.1AI score0.22851EPSS

CVE•added 2024/02/13 6:15 p.m.•231 views

CVE-2024-21344

Windows Network Address Translation (NAT) Denial of Service Vulnerability

5.9CVSS6.2AI score0.00758EPSS

CVE•added 2024/03/12 5:15 p.m.•231 views

CVE-2024-21446

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00088EPSS

CVE•added 2024/04/09 5:15 p.m.•231 views

CVE-2024-29056

Windows Authentication Elevation of Privilege Vulnerability

4.3CVSS6.3AI score0.01044EPSS

CVE•added 2019/10/10 2:15 p.m.•230 views

CVE-2019-1340

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique f...

7.8CVSS7.6AI score0.38187EPSS

CVE•added 2023/06/14 12:15 a.m.•230 views

CVE-2023-29363

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.05856EPSS

CVE•added 2024/02/13 6:15 p.m.•230 views

CVE-2024-21375

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.01718EPSS

CVE•added 2024/03/12 5:15 p.m.•230 views

CVE-2024-21450

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.01583EPSS

CVE•added 2017/03/17 12:59 a.m.•228 views

CVE-2017-0025

The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k E...

7.8CVSS6.2AI score0.1628EPSS

CVE•added 2020/07/14 11:15 p.m.•228 views

CVE-2020-1043

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036,...

9CVSS9.2AI score0.01059EPSS

CVE•added 2024/04/09 5:15 p.m.•228 views

CVE-2024-29050

Windows Cryptographic Services Remote Code Execution Vulnerability

8.4CVSS8.8AI score0.18715EPSS

CVE•added 2025/06/10 5:23 p.m.•228 views

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

8.8CVSS8.7AI score0.00341EPSS

CVE•added 2020/06/09 8:15 p.m.•227 views

CVE-2020-1266

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1269, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2021/07/14 6:15 p.m.•227 views

CVE-2021-34494

Windows DNS Server Remote Code Execution Vulnerability

8.8CVSS8.4AI score0.01237EPSS

CVE•added 2024/03/12 5:15 p.m.•227 views

CVE-2024-26197

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

6.5CVSS7.3AI score0.05531EPSS

CVE•added 2019/10/10 2:15 p.m.•226 views

CVE-2019-1342

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315, CVE-2019-1339.

7.8CVSS8.5AI score0.06219EPSS

CVE•added 2022/09/13 7:15 p.m.•226 views

CVE-2022-33679

Windows Kerberos Elevation of Privilege Vulnerability

8.1CVSS8.8AI score0.78364EPSS

CVE•added 2023/11/14 6:15 p.m.•226 views

CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.00166EPSS

CVE•added 2024/03/12 5:15 p.m.•226 views

CVE-2024-21451

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.01047EPSS

CVE•added 2024/12/12 2:4 a.m.•226 views

CVE-2024-49113

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

7.5CVSS7.5AI score0.87357EPSS

CVE•added 2017/07/11 9:29 p.m.•225 views

CVE-2017-8563

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Pro...

8.1CVSS7.1AI score0.17921EPSS

CVE•added 2022/03/09 5:15 p.m.•225 views

CVE-2022-24459

Windows Fax and Scan Service Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00227EPSS

CVE•added 2022/03/09 5:15 p.m.•225 views

CVE-2022-24507

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00365EPSS

CVE•added 2024/02/13 6:15 p.m.•225 views

CVE-2024-21343

Windows Network Address Translation (NAT) Denial of Service Vulnerability

7.5CVSS7.7AI score0.01145EPSS

CVE•added 2024/02/13 6:15 p.m.•225 views

CVE-2024-21368

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.01901EPSS

CVE•added 2019/08/14 9:15 p.m.•224 views

CVE-2019-1222

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...

10CVSS9.7AI score0.13718EPSS

CVE•added 2020/06/09 8:15 p.m.•224 views

CVE-2020-1273

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/06/09 8:15 p.m.•224 views

CVE-2020-1299

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.32912EPSS

CVE•added 2021/03/11 4:15 p.m.•224 views

CVE-2021-26868

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.12212EPSS

CVE•added 2022/07/12 11:15 p.m.•224 views

CVE-2022-22038

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.01911EPSS

CVE•added 2023/05/09 6:15 p.m.•224 views

CVE-2023-24903

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.1AI score0.00645EPSS

CVE•added 2024/02/13 6:15 p.m.•224 views

CVE-2024-21349

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.01901EPSS

CVE•added 2024/02/13 6:15 p.m.•224 views

CVE-2024-21360

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.0192EPSS

CVE•added 2024/02/13 6:15 p.m.•224 views

CVE-2024-21367

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.01901EPSS

CVE•added 2024/09/10 5:15 p.m.•224 views

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability

7.8CVSS8.6AI score0.00389EPSS

CVE•added 2025/01/14 6:16 p.m.•224 views

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.027EPSS

CVE•added 2020/07/14 11:15 p.m.•223 views

CVE-2020-1041

9CVSS9.2AI score0.01059EPSS

CVE•added 2022/04/15 7:15 p.m.•223 views

CVE-2022-24533

Remote Desktop Protocol Remote Code Execution Vulnerability

8.5CVSS8.9AI score0.07596EPSS

CVE•added 2024/02/13 6:15 p.m.•223 views

CVE-2024-21347

Microsoft ODBC Driver Remote Code Execution Vulnerability

7.5CVSS7.9AI score0.00966EPSS

CVE•added 2024/02/13 6:15 p.m.•223 views

CVE-2024-21391

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.2AI score0.02032EPSS

CVE•added 2024/02/13 6:15 p.m.•223 views

CVE-2024-21406

Windows Printing Service Spoofing Vulnerability

7.5CVSS7.7AI score0.01257EPSS

CVE•added 2019/03/06 12:0 a.m.•222 views

CVE-2019-0633

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.

9CVSS9.3AI score0.33738EPSS

CVE•added 2022/03/09 5:15 p.m.•222 views

CVE-2022-23281

Windows Common Log File System Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00475EPSS

CVE•added 2022/08/09 8:15 p.m.•222 views

CVE-2022-35794

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02378EPSS

CVE•added 2023/10/10 6:15 p.m.•222 views

CVE-2023-29348

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability