Windows Server 2016

CVEs (3,555)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-25187	Microsoft Windows Server 2003	Hig	0.51	7.8	0.03	Mar 10, 2026	Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2025-30388	Microsoft Win32K	Hig	0.51	7.8	0.03	May 13, 2025	Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-21338	Microsoft Office	Hig	0.51	7.8	0.00	Jan 14, 2025	GDI+ Remote Code Execution Vulnerability
CVE-2024-38250	Microsoft Graphics Component	Hig	0.51	7.8	0.01	Sep 10, 2024	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-26926	Microsoft Windows Address Book	Hig	0.51	7.8	0.03	May 10, 2022	Windows Address Book Remote Code Execution Vulnerability
CVE-2022-26795	Microsoft Windows Server 2003	Hig	0.51	7.8	0.01	Apr 15, 2022	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2018-8497	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Oct 10, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8484	Microsoft Windows	Hig	0.51	7.8	0.01	Oct 10, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012,…
CVE-2018-8462	Microsoft Windows	Hig	0.51	7.8	0.01	Sep 13, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8455	Microsoft Windows	Hig	0.51	7.8	0.01	Sep 13, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…
CVE-2018-8401	Microsoft Windows	Hig	0.51	7.8	0.02	Aug 15, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE…
CVE-2018-8347	Microsoft Windows	Hig	0.51	7.8	0.01	Aug 15, 2018	An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8343	Microsoft Windows NDIS	Hig	0.51	7.8	0.01	Aug 15, 2018	An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8313	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Jul 11, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10,…
CVE-2018-8282	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01	Jul 11, 2018	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8213	Microsoft Windows Server 2016	Hig	0.51	7.8	0.08	Jun 14, 2018	A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.
CVE-2018-8165	Microsoft Windows	Hig	0.51	7.8	0.01	May 9, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8164	Microsoft Windows	Hig	0.51	7.8	0.01	May 9, 2018	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2018-1009	Microsoft DirectX Graphics Kernel Subsystem	Hig	0.51	7.8	0.01	Apr 12, 2018	An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1,…
CVE-2018-0963	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Apr 12, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

CVE-2026-25187HigMar 10, 2026
Microsoft
Windows Server 2003
risk 0.51cvss 7.8epss 0.03
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2025-30388HigMay 13, 2025
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.03
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-21338HigJan 14, 2025
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
GDI+ Remote Code Execution Vulnerability
CVE-2024-38250HigSep 10, 2024
Microsoft
Graphics Component
risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-26926HigMay 10, 2022
Microsoft
Windows Address Book
risk 0.51cvss 7.8epss 0.03
Windows Address Book Remote Code Execution Vulnerability
CVE-2022-26795HigApr 15, 2022
Microsoft
Windows Server 2003
risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2018-8497HigOct 10, 2018
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8484HigOct 10, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012,…
CVE-2018-8462HigSep 13, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8455HigSep 13, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…
CVE-2018-8401HigAug 15, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE…
CVE-2018-8347HigAug 15, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8343HigAug 15, 2018
Microsoft
Windows NDIS
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8313HigJul 11, 2018
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10,…
CVE-2018-8282HigJul 11, 2018
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8213HigJun 14, 2018
Microsoft
Windows Server 2016
risk 0.51cvss 7.8epss 0.08
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.
CVE-2018-8165HigMay 9, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8164HigMay 9, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2018-1009HigApr 12, 2018
Microsoft
DirectX Graphics Kernel Subsystem
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1,…
CVE-2018-0963HigApr 12, 2018
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Page 10 of 178