Windows Server 2016
by Microsoft
CVEs (5,109)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-37984 | Hig | 0.55 | 8.4 | 0.01 | Jul 9, 2024 | Secure Boot Security Feature Bypass Vulnerability | ||
| CVE-2024-29050 | Hig | 0.55 | 8.4 | 0.01 | Apr 9, 2024 | Windows Cryptographic Services Remote Code Execution Vulnerability | ||
| CVE-2024-21357 | Hig | 0.55 | 8.1 | 0.27 | Feb 13, 2024 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | ||
| CVE-2022-38044 | Hig | 0.55 | 7.8 | 0.56 | Oct 11, 2022 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability | ||
| CVE-2022-30222 | Hig | 0.55 | 8.4 | 0.01 | Jul 12, 2022 | Windows Shell Remote Code Execution Vulnerability | ||
| CVE-2022-30163 | Hig | 0.55 | 8.5 | 0.02 | Jun 15, 2022 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2021-41379 | Med | 0.55 | 5.5 | 0.19 | KEV | Nov 10, 2021 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2021-34450 | Hig | 0.55 | 8.5 | 0.03 | Jul 16, 2021 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2021-26864 | Hig | 0.55 | 8.4 | 0.01 | Mar 11, 2021 | Windows Virtual Registry Provider Elevation of Privilege Vulnerability | ||
| CVE-2020-17136 | Hig | 0.55 | 7.8 | 0.14 | Dec 10, 2020 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2020-1285 | Hig | 0.55 | 8.4 | 0.04 | Sep 11, 2020 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install… | ||
| CVE-2020-1074 | Hig | 0.55 | 7.8 | 0.53 | Sep 11, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this… | ||
| CVE-2020-1337 | Hig | 0.55 | 7.8 | 0.14 | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could… | ||
| CVE-2020-1048 | Hig | 0.55 | 7.8 | 0.17 | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could… | ||
| CVE-2020-0910 | Hig | 0.55 | 8.4 | 0.09 | Apr 15, 2020 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. | ||
| CVE-2019-1398 | Hig | 0.55 | 8.4 | 0.03 | Nov 12, 2019 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,… | ||
| CVE-2019-1397 | Hig | 0.55 | 8.4 | 0.04 | Nov 12, 2019 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,… | ||
| CVE-2019-1389 | Hig | 0.55 | 8.4 | 0.04 | Nov 12, 2019 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397,… | ||
| CVE-2019-1170 | Hig | 0.55 | 7.9 | 0.02 | Aug 14, 2019 | An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the… | ||
| CVE-2019-0703 | Med | 0.55 | 6.5 | 0.10 | KEV | Apr 9, 2019 | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. |
- risk 0.55cvss 8.4epss 0.01
Secure Boot Security Feature Bypass Vulnerability
- risk 0.55cvss 8.4epss 0.01
Windows Cryptographic Services Remote Code Execution Vulnerability
- risk 0.55cvss 8.1epss 0.27
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- risk 0.55cvss 7.8epss 0.56
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
- risk 0.55cvss 8.4epss 0.01
Windows Shell Remote Code Execution Vulnerability
- risk 0.55cvss 8.5epss 0.02
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.55cvss 5.5epss 0.19
Windows Installer Elevation of Privilege Vulnerability
- risk 0.55cvss 8.5epss 0.03
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.55cvss 8.4epss 0.01
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
- risk 0.55cvss 7.8epss 0.14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install…
- risk 0.55cvss 7.8epss 0.53
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this…
- risk 0.55cvss 7.8epss 0.14
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
- risk 0.55cvss 7.8epss 0.17
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
- risk 0.55cvss 8.4epss 0.09
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
- risk 0.55cvss 8.4epss 0.03
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
- risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
- risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397,…
- risk 0.55cvss 7.9epss 0.02
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the…
- risk 0.55cvss 6.5epss 0.10
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
Page 40 of 256