Windows Server 2016@2004 Security Vulnerabilities and Issues — Windows Server 2016@2004 CVE List

Lucene search

MicrosoftWindows Server 20162004

897 matches found

CVE•added 2021/11/10 1:19 a.m.•1253 views

CVE-2021-42287

Active Directory Domain Services Elevation of Privilege Vulnerability

8.8CVSS8.2AI score0.93954EPSS

CVE•added 2020/11/11 7:15 a.m.•1244 views

CVE-2020-17087

Windows Kernel Local Elevation of Privilege Vulnerability

7.8CVSS8.3AI score0.15084EPSS

CVE•added 2020/11/11 7:15 a.m.•935 views

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...

9CVSS6.8AI score0.20086EPSS

CVE•added 2021/05/11 8:15 p.m.•521 views

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802...

3.5CVSS6.4AI score0.00848EPSS

CVE•added 2020/06/09 8:15 p.m.•380 views

CVE-2020-1206

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.

7.5CVSS7.4AI score0.47718EPSS

CVE•added 2021/07/16 9:15 p.m.•325 views

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

9.8CVSS8.6AI score0.30378EPSS

CVE•added 2020/07/29 6:15 p.m.•318 views

CVE-2020-15707

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extrem...

6.4CVSS7.6AI score0.00033EPSS

CVE•added 2021/11/10 1:19 a.m.•317 views

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

8.8CVSS8AI score0.0056EPSS

CVE•added 2021/07/16 9:15 p.m.•292 views

CVE-2021-34458

Windows Kernel Remote Code Execution Vulnerability

9.9CVSS9.4AI score0.01265EPSS

CVE•added 2021/01/12 8:15 p.m.•291 views

CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00979EPSS

CVE•added 2020/06/09 8:15 p.m.•288 views

CVE-2020-1269

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/07/29 6:15 p.m.•285 views

CVE-2020-15706

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 ...

6.4CVSS7.7AI score0.00064EPSS

CVE•added 2020/07/29 6:15 p.m.•284 views

CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. Thi...

6.4CVSS7.1AI score0.00018EPSS

CVE•added 2021/07/14 6:15 p.m.•275 views

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00403EPSS

CVE•added 2020/11/11 7:15 a.m.•273 views

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.14901EPSS

CVE•added 2021/08/12 6:15 p.m.•257 views

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

9.9CVSS8.8AI score0.09829EPSS

CVE•added 2021/09/15 12:15 p.m.•253 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

CVE•added 2021/09/15 12:15 p.m.•245 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00307EPSS

CVE•added 2020/08/17 7:15 p.m.•243 views

CVE-2020-1337

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; ...

7.8CVSS7.8AI score0.53476EPSS

CVE•added 2021/08/12 6:15 p.m.•240 views

CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

9.8CVSS8.8AI score0.10206EPSS

CVE•added 2020/06/09 8:15 p.m.•239 views

CVE-2020-1307

9.3CVSS7.7AI score0.19295EPSS

CVE•added 2021/05/11 7:15 p.m.•239 views

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0033EPSS

CVE•added 2020/09/11 5:15 p.m.•236 views

CVE-2020-1013

An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.To exploit this vulnerabili...

9.3CVSS8.1AI score0.15904EPSS

CVE•added 2021/01/12 8:15 p.m.•233 views

CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

8.8CVSS8AI score0.53619EPSS

CVE•added 2020/11/11 7:15 a.m.•227 views

CVE-2020-1599

Windows Spoofing Vulnerability

5.5CVSS7.2AI score0.05733EPSS

CVE•added 2021/07/14 6:15 p.m.•227 views

CVE-2021-34494

Windows DNS Server Remote Code Execution Vulnerability

8.8CVSS8.4AI score0.01306EPSS

CVE•added 2021/08/12 6:15 p.m.•225 views

CVE-2021-34487

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00098EPSS

CVE•added 2020/06/09 8:15 p.m.•224 views

CVE-2020-1299

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.32912EPSS

CVE•added 2020/06/09 8:15 p.m.•221 views

CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.34234EPSS

CVE•added 2021/08/12 6:15 p.m.•221 views

CVE-2021-36936

Windows Print Spooler Remote Code Execution Vulnerability

9.8CVSS9AI score0.03552EPSS

CVE•added 2021/12/15 3:15 p.m.•221 views

CVE-2021-43217

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.25196EPSS

CVE•added 2020/06/09 8:15 p.m.•220 views

CVE-2020-1300

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious ...

8.8CVSS8.3AI score0.40477EPSS

CVE•added 2020/06/09 8:15 p.m.•219 views

CVE-2020-1274

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/06/09 8:15 p.m.•216 views

CVE-2020-1237

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273,...

7.8CVSS7.8AI score0.19295EPSS

CVE•added 2021/05/11 7:15 p.m.•215 views

CVE-2021-28476

Windows Hyper-V Remote Code Execution Vulnerability

9.9CVSS9.7AI score0.63205EPSS

CVE•added 2020/06/09 8:15 p.m.•214 views

CVE-2020-1316

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/06/09 8:15 p.m.•213 views

CVE-2020-1276

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/10/16 11:15 p.m.•213 views

CVE-2020-16916

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the syste...

7.8CVSS8.2AI score0.00744EPSS

CVE•added 2020/06/09 8:15 p.m.•212 views

CVE-2020-1275

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/06/09 8:15 p.m.•211 views

CVE-2020-1262

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2021/12/15 3:15 p.m.•211 views

CVE-2021-43883

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.7AI score0.08752EPSS

CVE•added 2020/06/09 8:15 p.m.•210 views

CVE-2020-1246

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/10/16 11:15 p.m.•207 views

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to ...

5.5CVSS5.5AI score0.10627EPSS

CVE•added 2020/06/09 8:15 p.m.•204 views

CVE-2020-1266

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2020/10/16 11:15 p.m.•204 views

CVE-2020-16891

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could c...

8.8CVSS8.7AI score0.00539EPSS

CVE•added 2021/10/13 1:15 a.m.•204 views

CVE-2021-41335

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00462EPSS

CVE•added 2020/06/09 8:15 p.m.•201 views

CVE-2020-1273

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2021/03/11 4:15 p.m.•201 views

CVE-2021-26868

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.12212EPSS