Windows Server 2016

CVEs (5,109)

• CVE-2019-1117HigJul 15, 2019
  Microsoft

  DirectWrite
  risk 0.62cvss 8.8epss 0.24

  A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123,…

• CVE-2024-43451MedKEVNov 12, 2024
  Microsoft

  NTLM Hash Disclosure Spoofing Vulnerability
  risk 0.61cvss 6.5epss 0.84

  NTLM Hash Disclosure Spoofing Vulnerability

• CVE-2022-26904HigKEVApr 15, 2022
  Microsoft

  Windows User Profile Service
  risk 0.61cvss 7.0epss 0.10

  Windows User Profile Service Elevation of Privilege Vulnerability

• CVE-2021-34481HigJul 16, 2021
  Microsoft

  Windows Print Spooler
  risk 0.61cvss 8.8epss 0.48

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;…

• CVE-2021-31962CriJun 8, 2021
  Microsoft

  Kerberos
  risk 0.61cvss 9.4epss 0.04

  Kerberos AppContainer Security Feature Bypass Vulnerability

• CVE-2021-24093HigFeb 25, 2021
  Microsoft

  Windows Graphics component
  risk 0.61cvss 8.8epss 0.44

  Windows Graphics Component Remote Code Execution Vulnerability

• CVE-2019-1152HigAug 14, 2019
  Microsoft

  Windows Font Library
  risk 0.61cvss 8.8epss 0.13

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…

• CVE-2019-1151HigAug 14, 2019
  Microsoft

  Windows Font Library
  risk 0.61cvss 8.8epss 0.15

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…

• CVE-2019-1149HigAug 14, 2019
  Microsoft

  Windows Font Library
  risk 0.61cvss 8.8epss 0.14

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…

• CVE-2019-1145HigAug 14, 2019
  Microsoft

  Windows Font Library
  risk 0.61cvss 8.8epss 0.13

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…

• CVE-2019-1144HigAug 14, 2019
  Microsoft

  Windows
  risk 0.61cvss 8.8epss 0.13

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…

• CVE-2018-8420HigSep 13, 2018
  Microsoft

  Windows 7
  risk 0.61cvss 8.8epss 0.49

  A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,…

• CVE-2025-53778HigAug 12, 2025
  Microsoft

  Windows
  risk 0.60cvss 8.8epss 0.38

  Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

• CVE-2024-38144HigAug 13, 2024
  Microsoft

  Kernel Streaming WOW Thunk Service Driver
  risk 0.60cvss 8.8epss 0.32

  Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

• CVE-2023-35628HigDec 12, 2023
  Microsoft

  MSHTML Platform
  risk 0.60cvss 8.1epss 0.93

  Windows MSHTML Platform Remote Code Execution Vulnerability

• CVE-2023-28231HigApr 11, 2023
  Microsoft

  DHCP Server
  risk 0.60cvss 8.8epss 0.37

  DHCP Server Service Remote Code Execution Vulnerability

• CVE-2022-41076HigDec 13, 2022
  Microsoft

  Powershell
  risk 0.60cvss 8.5epss 0.62

  PowerShell Remote Code Execution Vulnerability

• CVE-2022-37958HigSep 13, 2022
  Microsoft

  Windows Server 2003
  risk 0.60cvss 8.1epss 0.86

  SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

• CVE-2022-24500HigApr 15, 2022
  Microsoft

  Windows SMB
  risk 0.60cvss 8.8epss 0.37

  Windows SMB Remote Code Execution Vulnerability

• CVE-2020-1301HigJun 9, 2020
  Microsoft

  Server Message Block
  risk 0.60cvss 8.8epss 0.37

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.