Windows Server 2016
by Microsoft
CVEs (5,109)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-48822 | Hig | 0.56 | 8.6 | 0.01 | Jul 8, 2025 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-27737 | Hig | 0.56 | 8.6 | 0.01 | Apr 8, 2025 | Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally. | ||
| CVE-2023-36563 | Med | 0.56 | 6.5 | 0.21 | KEV | Oct 10, 2023 | Microsoft WordPad Information Disclosure Vulnerability | |
| CVE-2023-28302 | Hig | 0.56 | 7.5 | 0.93 | Apr 11, 2023 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | ||
| CVE-2023-21769 | Hig | 0.56 | 7.5 | 0.89 | Apr 11, 2023 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | ||
| CVE-2023-21758 | Hig | 0.56 | 7.5 | 0.93 | Jan 10, 2023 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2023-21547 | Hig | 0.56 | 7.5 | 0.89 | Jan 10, 2023 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | ||
| CVE-2021-31977 | Hig | 0.56 | 8.6 | 0.03 | Jun 8, 2021 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2020-17095 | Hig | 0.56 | 8.5 | 0.05 | Dec 10, 2020 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2020-1112 | Hig | 0.56 | 8.5 | 0.03 | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content. An attacker who successfully exploited this vulnerability could upload restricted file types to an IIS-hosted folder. To… | ||
| CVE-2020-0668 | Hig | 0.56 | 7.8 | 0.26 | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672. | ||
| CVE-2019-0572 | Hig | 0.56 | 7.8 | 0.25 | Jan 8, 2019 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10… | ||
| CVE-2017-11810 | Hig | 0.56 | 7.5 | 0.55 | Oct 13, 2017 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… | ||
| CVE-2016-7212 | Hig | 0.56 | 7.8 | 0.70 | Nov 10, 2016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka… | ||
| CVE-2026-45607 | Hig | 0.55 | 8.4 | 0.00 | Jun 9, 2026 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-32091 | Hig | 0.55 | 8.4 | 0.00 | Apr 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2025-33067 | Hig | 0.55 | 8.4 | 0.00 | Jun 10, 2025 | Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2024-49113 | Hig | 0.55 | 7.5 | 0.83 | Dec 12, 2024 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | ||
| CVE-2024-49105 | Hig | 0.55 | 8.4 | 0.02 | Dec 12, 2024 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2024-38213 | Med | 0.55 | 6.5 | 0.14 | KEV | Aug 13, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability |
- risk 0.56cvss 8.6epss 0.01
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
- risk 0.56cvss 8.6epss 0.01
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
- risk 0.56cvss 6.5epss 0.21
Microsoft WordPad Information Disclosure Vulnerability
- risk 0.56cvss 7.5epss 0.93
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- risk 0.56cvss 7.5epss 0.89
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- risk 0.56cvss 7.5epss 0.93
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.56cvss 7.5epss 0.89
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
- risk 0.56cvss 8.6epss 0.03
Windows Hyper-V Denial of Service Vulnerability
- risk 0.56cvss 8.5epss 0.05
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.56cvss 8.5epss 0.03
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content. An attacker who successfully exploited this vulnerability could upload restricted file types to an IIS-hosted folder. To…
- risk 0.56cvss 7.8epss 0.26
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
- risk 0.56cvss 7.8epss 0.25
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
- risk 0.56cvss 7.5epss 0.55
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…
- risk 0.56cvss 7.8epss 0.70
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka…
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
- risk 0.55cvss 8.4epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
- risk 0.55cvss 8.4epss 0.00
Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
- risk 0.55cvss 7.5epss 0.83
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- risk 0.55cvss 8.4epss 0.02
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.55cvss 6.5epss 0.14
Windows Mark of the Web Security Feature Bypass Vulnerability
Page 39 of 256