Windows Server 2016@2004 Security Vulnerabilities and Issues — Windows Server 2016@2004 CVE List

Lucene search

MicrosoftWindows Server 20162004

897 matches found

CVE•added 2021/11/10 1:19 a.m.•1292 views

CVE-2021-42287

Active Directory Domain Services Elevation of Privilege Vulnerability

8.8CVSS8.2AI score0.93954EPSS

In wild

CVE•added 2020/11/11 7:15 a.m.•1291 views

CVE-2020-17087

Windows Kernel Local Elevation of Privilege Vulnerability

7.8CVSS8.3AI score0.16195EPSS

In wild

CVE•added 2020/11/11 7:15 a.m.•970 views

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...

9CVSS6.8AI score0.21753EPSS

In wild

CVE•added 2021/05/11 8:15 p.m.•553 views

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802...

3.5CVSS6.4AI score0.00267EPSS

CVE•added 2020/06/09 8:15 p.m.•414 views

CVE-2020-1206

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.

7.5CVSS7.4AI score0.47718EPSS

In wild

CVE•added 2021/07/16 9:15 p.m.•359 views

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

9.8CVSS8.6AI score0.26941EPSS

In wild

CVE•added 2021/11/10 1:19 a.m.•349 views

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

8.8CVSS8AI score0.00954EPSS

In wild

CVE•added 2020/07/29 6:15 p.m.•323 views

CVE-2020-15707

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extrem...

6.4CVSS7.6AI score0.00033EPSS

CVE•added 2021/01/12 8:15 p.m.•321 views

CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00979EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•320 views

CVE-2020-1269

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/07/14 6:15 p.m.•306 views

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00403EPSS

In wild

CVE•added 2021/07/16 9:15 p.m.•293 views

CVE-2021-34458

Windows Kernel Remote Code Execution Vulnerability

9.9CVSS9.4AI score0.01265EPSS

CVE•added 2020/07/29 6:15 p.m.•291 views

CVE-2020-15706

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 ...

6.4CVSS7.7AI score0.00064EPSS

CVE•added 2020/07/29 6:15 p.m.•289 views

CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. Thi...

6.4CVSS7.1AI score0.00024EPSS

CVE•added 2021/09/15 12:15 p.m.•284 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

In wild

CVE•added 2021/09/15 12:15 p.m.•277 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00394EPSS

In wild

CVE•added 2020/11/11 7:15 a.m.•274 views

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.18017EPSS

CVE•added 2020/06/09 8:15 p.m.•269 views

CVE-2020-1307

9.3CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/05/11 7:15 p.m.•269 views

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0033EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•258 views

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

9.9CVSS8.8AI score0.09829EPSS

CVE•added 2020/11/11 7:15 a.m.•257 views

CVE-2020-1599

Windows Spoofing Vulnerability

5.5CVSS7.2AI score0.05733EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•257 views

CVE-2021-34487

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00098EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•253 views

CVE-2021-43217

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.25196EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•249 views

CVE-2020-1274

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•247 views

CVE-2020-1237

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273,...

7.8CVSS7.8AI score0.19295EPSS

In wild

CVE•added 2020/08/17 7:15 p.m.•247 views

CVE-2020-1337

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; ...

7.8CVSS7.8AI score0.53476EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•245 views

CVE-2020-1316

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/10/16 11:15 p.m.•245 views

CVE-2020-16916

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...

7.8CVSS8.2AI score0.00744EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•244 views

CVE-2020-1276

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•243 views

CVE-2021-43883

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.7AI score0.08752EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•242 views

CVE-2020-1275

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•241 views

CVE-2020-1246

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•241 views

CVE-2020-1262

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•241 views

CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

9.8CVSS8.8AI score0.10206EPSS

CVE•added 2020/09/11 5:15 p.m.•237 views

CVE-2020-1013

An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.To exploit this vulnerability, an att...

9.3CVSS8.1AI score0.1795EPSS

CVE•added 2021/01/12 8:15 p.m.•236 views

CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

8.8CVSS8AI score0.53619EPSS

Web

CVE•added 2020/06/09 8:15 p.m.•235 views

CVE-2020-1266

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/03/11 4:15 p.m.•234 views

CVE-2021-26868

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.12212EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•233 views

CVE-2021-43226

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.16129EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•232 views

CVE-2020-1273

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•228 views

CVE-2020-1264

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/07/14 6:15 p.m.•228 views

CVE-2021-34494

Windows DNS Server Remote Code Execution Vulnerability

8.8CVSS8.4AI score0.01237EPSS

CVE•added 2020/06/09 8:15 p.m.•225 views

CVE-2020-1299

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.32912EPSS

CVE•added 2020/06/09 8:15 p.m.•224 views

CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.34234EPSS

CVE•added 2021/12/15 3:15 p.m.•223 views

CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00251EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•222 views

CVE-2020-1300

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious ...

8.8CVSS8.3AI score0.40477EPSS

CVE•added 2021/08/12 6:15 p.m.•222 views

CVE-2021-36936

Windows Print Spooler Remote Code Execution Vulnerability

9.8CVSS9AI score0.03552EPSS

CVE•added 2021/05/11 7:15 p.m.•218 views

CVE-2021-28476

Windows Hyper-V Remote Code Execution Vulnerability

9.9CVSS9.7AI score0.63205EPSS

CVE•added 2020/10/16 11:15 p.m.•211 views

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...

5.5CVSS5.5AI score0.10627EPSS

CVE•added 2021/03/11 4:15 p.m.•209 views

CVE-2021-26899

Windows UPnP Device Host Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00436EPSS

In wild

Total number of security vulnerabilities897