Windows Server 2016
by Microsoft
CVEs (5,109)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-36965 | Hig | 0.58 | 8.8 | 0.05 | Sep 15, 2021 | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | ||
| CVE-2021-36947 | Hig | 0.58 | 8.8 | 0.07 | Aug 12, 2021 | Windows Print Spooler Remote Code Execution Vulnerability | ||
| CVE-2021-36936 | Hig | 0.58 | 8.8 | 0.07 | Aug 12, 2021 | Windows Print Spooler Remote Code Execution Vulnerability | ||
| CVE-2021-1678 | Hig | 0.58 | 8.8 | 0.09 | Jan 12, 2021 | Windows Print Spooler Spoofing Vulnerability | ||
| CVE-2020-17042 | Hig | 0.58 | 8.8 | 0.05 | Nov 11, 2020 | Windows Print Spooler Remote Code Execution Vulnerability | ||
| CVE-2020-16911 | Hig | 0.58 | 8.8 | 0.04 | Oct 16, 2020 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install… | ||
| CVE-2020-16898 | Hig | 0.58 | 8.8 | 0.10 | Oct 16, 2020 | A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To… | ||
| CVE-2020-1129 | Hig | 0.58 | 8.8 | 0.04 | Sep 11, 2020 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change,… | ||
| CVE-2020-0922 | Hig | 0.58 | 8.8 | 0.05 | Sep 11, 2020 | A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have… | ||
| CVE-2020-1561 | Hig | 0.58 | 8.8 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open… | ||
| CVE-2020-1472 | Med | 0.58 | 5.5 | 1.00 | KEV | Aug 17, 2020 | An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially… | |
| CVE-2020-1435 | Hig | 0.58 | 8.8 | 0.14 | Jul 14, 2020 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. | ||
| CVE-2020-1412 | Hig | 0.58 | 8.8 | 0.14 | Jul 14, 2020 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. | ||
| CVE-2020-1408 | Hig | 0.58 | 8.8 | 0.06 | Jul 14, 2020 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. | ||
| CVE-2020-1317 | Hig | 0.58 | 8.8 | 0.04 | Jun 9, 2020 | An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'. | ||
| CVE-2020-1299 | Hig | 0.58 | 8.8 | 0.15 | Jun 9, 2020 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution… | ||
| CVE-2020-1286 | Hig | 0.58 | 8.8 | 0.12 | Jun 9, 2020 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution… | ||
| CVE-2020-1281 | Hig | 0.58 | 8.8 | 0.14 | Jun 9, 2020 | A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'. | ||
| CVE-2020-1248 | Hig | 0.58 | 8.8 | 0.14 | Jun 9, 2020 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. | ||
| CVE-2020-1239 | Hig | 0.58 | 8.8 | 0.06 | Jun 9, 2020 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238. |
- risk 0.58cvss 8.8epss 0.05
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.07
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.07
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.09
Windows Print Spooler Spoofing Vulnerability
- risk 0.58cvss 8.8epss 0.05
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install…
- risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change,…
- risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open…
- risk 0.58cvss 5.5epss 1.00
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially…
- risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.06
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.04
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
- risk 0.58cvss 8.8epss 0.15
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
- risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution…
- risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.06
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.
Page 18 of 256