Windows Server 2016@- Security Vulnerabilities and Issues — Page 25 of Windows Server 2016@- CVE List

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".

7.8CVSS7.5AI score0.04863EPSS

CVE•added 2018/04/12 1:29 a.m.•118 views

CVE-2018-0956

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

7.8CVSS6.4AI score0.12193EPSS

CVE•added 2019/01/08 9:29 p.m.•118 views

CVE-2019-0551

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, W...

8.4CVSS7.9AI score0.00598EPSS

CVE•added 2019/01/08 9:29 p.m.•118 views

CVE-2019-0573

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is uni...

7.8CVSS7.5AI score0.1476EPSS

CVE•added 2019/07/15 7:15 p.m.•118 views

CVE-2019-1087

An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1088.

7.8CVSS7.6AI score0.00278EPSS

CVE•added 2020/08/17 7:15 p.m.•118 views

CVE-2020-1529

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete d...

7.8CVSS8.1AI score0.00505EPSS

CVE•added 2020/09/11 5:15 p.m.•118 views

CVE-2020-1596

A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.To exploit the vulnerability, an attacker would have to condu...

5.4CVSS6.2AI score0.00252EPSS

CVE•added 2020/10/16 11:15 p.m.•118 views

CVE-2020-16909

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.An attacker who successfully exploited the vulnerability could gain greater access to ...

7.8CVSS8AI score0.00524EPSS

CVE•added 2021/02/25 11:15 p.m.•118 views

CVE-2021-1722

Windows Fax Service Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.01984EPSS

CVE•added 2021/06/08 11:15 p.m.•118 views

CVE-2021-31977

Windows Hyper-V Denial of Service Vulnerability

8.6CVSS8.9AI score0.05071EPSS

CVE•added 2021/10/13 1:15 a.m.•118 views

CVE-2021-41331

Windows Media Audio Decoder Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.01999EPSS

CVE•added 2022/01/11 9:15 p.m.•118 views

CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

7.8CVSS8.3AI score0.00492EPSS

CVE•added 2022/01/11 9:15 p.m.•118 views

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00559EPSS

CVE•added 2022/04/15 7:15 p.m.•118 views

CVE-2022-24550

Windows Telephony Server Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00432EPSS

CVE•added 2022/10/11 7:15 p.m.•118 views

CVE-2022-34689

Windows CryptoAPI Spoofing Vulnerability

7.5CVSS8.5AI score0.18057EPSS

CVE•added 2022/11/09 10:15 p.m.•118 views

CVE-2022-41050

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00189EPSS

CVE•added 2022/12/13 7:15 p.m.•118 views

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.63251EPSS

CVE•added 2023/04/11 9:15 p.m.•118 views

CVE-2023-24883

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

6.5CVSS6.3AI score0.03362EPSS

CVE•added 2023/04/11 9:15 p.m.•118 views

CVE-2023-28269

Windows Boot Manager Security Feature Bypass Vulnerability

6.8CVSS6.4AI score0.00159EPSS

CVE•added 2018/02/15 2:29 a.m.•117 views

CVE-2018-0832

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnera...

4.7CVSS4.9AI score0.11699EPSS

CVE•added 2018/08/15 5:29 p.m.•117 views

CVE-2018-8341

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv...

4.7CVSS5.6AI score0.01452EPSS

CVE•added 2019/06/12 2:29 p.m.•117 views

CVE-2019-0907

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.1AI score0.10107EPSS

CVE•added 2019/08/14 9:15 p.m.•117 views

CVE-2019-1148

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker wou...

5.5CVSS6.7AI score0.03723EPSS

CVE•added 2020/01/14 11:15 p.m.•117 views

CVE-2020-0623

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS

CVE•added 2020/03/12 4:15 p.m.•117 views

CVE-2020-0690

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

10CVSS9.3AI score0.13249EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1379

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS7.3AI score0.20332EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1554

7.8CVSS8.6AI score0.13831EPSS

CVE•added 2020/08/17 7:15 p.m.•117 views

CVE-2020-1584

An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially craft...

7.8CVSS8.1AI score0.0073EPSS

CVE•added 2020/12/10 12:15 a.m.•117 views

CVE-2020-17103

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

7.8CVSS7.2AI score0.01013EPSS

CVE•added 2021/04/13 8:15 p.m.•117 views

CVE-2021-28357

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/07/14 6:15 p.m.•117 views

CVE-2021-34498

Windows GDI Elevation of Privilege Vulnerability