Windows Server 2016

CVEs (5,109)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2016-7238	Microsoft Windows	Hig	0.51	7.8	0.01		Nov 10, 2016	Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to…
CVE-2016-7237	Microsoft Windows	Med	0.51	6.5	0.67		Nov 10, 2016	Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote…
CVE-2016-7222	Microsoft Windows Server 2016	Hig	0.51	7.8	0.01		Nov 10, 2016	Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task, aka "Task Scheduler Elevation of Privilege Vulnerability."
CVE-2016-7221	Microsoft Windows	Hig	0.51	7.8	0.02		Nov 10, 2016	Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to…
CVE-2016-7215	Microsoft Windows	Hig	0.51	7.8	0.03		Nov 10, 2016	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted…
CVE-2016-7184	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3338	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3335	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3334	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3333	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3332	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-0026	Microsoft Windows	Hig	0.51	7.8	0.07		Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2013-3900	Microsoft Windows	Med	0.51	5.5	0.45	KEV	Dec 11, 2013	Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows…
CVE-2026-27913	Microsoft Windows BitLocker	Hig	0.50	7.7	0.00		Apr 14, 2026	Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20852	Microsoft Windows Hello	Hig	0.50	7.7	0.01		Jan 13, 2026	Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
CVE-2026-20804	Microsoft Windows Hello	Hig	0.50	7.7	0.01		Jan 13, 2026	Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
CVE-2025-59200	Microsoft Data Sharing Service Client	Hig	0.50	7.7	0.01		Oct 14, 2025	Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
CVE-2025-53722	Microsoft Windows Remote Desktop Service	Hig	0.50	7.5	0.22		Aug 12, 2025	Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.
CVE-2025-47984	Microsoft Windows Server 2003	Hig	0.50	7.5	0.17		Jul 8, 2025	Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2025-29833	Microsoft Windows Virtual Machine Bus	Hig	0.50	7.7	0.00		May 13, 2025	Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.

CVE-2016-7238HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to…
CVE-2016-7237MedNov 10, 2016
Microsoft
Windows
risk 0.51cvss 6.5epss 0.67
Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote…
CVE-2016-7222HigNov 10, 2016
Microsoft
Windows Server 2016
risk 0.51cvss 7.8epss 0.01
Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task, aka "Task Scheduler Elevation of Privilege Vulnerability."
CVE-2016-7221HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.02
Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to…
CVE-2016-7215HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.03
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted…
CVE-2016-7184HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3338HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3335HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3334HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3333HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3332HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-0026HigNov 10, 2016
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2013-3900MedKEVDec 11, 2013
Microsoft
Windows
risk 0.51cvss 5.5epss 0.45
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows…
CVE-2026-27913HigApr 14, 2026
Microsoft
Windows BitLocker
risk 0.50cvss 7.7epss 0.00
Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20852HigJan 13, 2026
Microsoft
Windows Hello
risk 0.50cvss 7.7epss 0.01
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
CVE-2026-20804HigJan 13, 2026
Microsoft
Windows Hello
risk 0.50cvss 7.7epss 0.01
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
CVE-2025-59200HigOct 14, 2025
Microsoft
Data Sharing Service Client
risk 0.50cvss 7.7epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
CVE-2025-53722HigAug 12, 2025
Microsoft
Windows Remote Desktop Service
risk 0.50cvss 7.5epss 0.22
Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.
CVE-2025-47984HigJul 8, 2025
Microsoft
Windows Server 2003
risk 0.50cvss 7.5epss 0.17
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2025-29833HigMay 13, 2025
Microsoft
Windows Virtual Machine Bus
risk 0.50cvss 7.7epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.

Page 130 of 256