VYPR

Windows Server 2016

by Microsoft

CVEs (5,109)

  • CVE-2025-49760LowJul 8, 2025
    risk 0.23cvss 3.5epss 0.01

    External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.

  • CVE-2020-24588LowMay 11, 2021
    risk 0.23cvss 3.5epss 0.04

    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is…

  • CVE-2017-8676LowSep 13, 2017
    risk 0.23cvss 3.3epss 0.14

    The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for…

  • CVE-2017-0042LowMar 17, 2017
    risk 0.23cvss 3.1epss 0.30

    Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted…

  • CVE-2026-21249LowFeb 10, 2026
    risk 0.22cvss 3.3epss 0.11

    External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

  • CVE-2022-21977LowMar 9, 2022
    risk 0.22cvss 3.3epss 0.03

    Media Foundation Information Disclosure Vulnerability

  • CVE-2021-28312LowApr 13, 2021
    risk 0.22cvss 3.3epss 0.07

    Windows NTFS Denial of Service Vulnerability

  • CVE-2020-17097LowDec 10, 2020
    risk 0.22cvss 3.3epss 0.01

    Windows Digital Media Receiver Elevation of Privilege Vulnerability

  • CVE-2019-1488LowDec 10, 2019
    risk 0.22cvss 3.3epss 0.01

    A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.

  • CVE-2019-1418LowNov 12, 2019
    risk 0.22cvss 3.3epss 0.02

    An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

  • CVE-2017-0188LowApr 12, 2017
    risk 0.22cvss 3.3epss 0.03

    A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the…

  • CVE-2016-7214LowNov 10, 2016
    risk 0.22cvss 3.3epss 0.04

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection…

  • CVE-2025-21337LowFeb 11, 2025
    risk 0.21cvss 3.3epss 0.01

    Windows NTFS Elevation of Privilege Vulnerability

  • CVE-2022-38022LowOct 11, 2022
    risk 0.21cvss 3.3epss 0.01

    Windows Kernel Elevation of Privilege Vulnerability

  • CVE-2018-8482LowOct 10, 2018
    risk 0.21cvss 3.1epss 0.05

    An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2018-8481LowOct 10, 2018
    risk 0.21cvss 3.1epss 0.05

    An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2025-59280LowOct 14, 2025
    risk 0.20cvss 3.1epss 0.00

    Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

  • CVE-2017-0096LowMar 17, 2017
    risk 0.17cvss 2.6epss 0.02

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted…

  • CVE-2025-21312LowJan 14, 2025
    risk 0.16cvss 2.4epss 0.01

    Windows Smart Card Reader Information Disclosure Vulnerability

  • CVE-2017-11850LowNov 15, 2017
    risk 0.16cvss 2.5epss 0.03

    Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to…

Page 243 of 256