VYPR

Windows Server 2016

by Microsoft

CVEs (5,109)

  • CVE-2018-8584HigNov 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.54cvss 7.8epss 0.03

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

  • CVE-2018-8550HigNov 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.03

    An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server…

  • CVE-2018-8411HigOct 10, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.03

    An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows…

  • CVE-2018-8410HigSep 13, 2018
    Microsoft
    Windows 7
    risk 0.54cvss 7.8epss 0.04

    An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows…

  • CVE-2018-0952HigAug 15, 2018
    Microsoft
    Windows Server 2016
    risk 0.54cvss 7.8epss 0.06

    An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…

  • CVE-2018-8231HigJun 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.54cvss 8.1epss 0.16

    A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

  • CVE-2018-8225HigJun 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 8.1epss 0.24

    A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…

  • CVE-2018-0877HigMar 14, 2018
    Microsoft
    Windows Server 2016
    risk 0.54cvss 7.8epss 0.03

    The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege…

  • CVE-2018-0752HigJan 4, 2018
    Microsoft
    Windows Server 2012
    risk 0.54cvss 7.8epss 0.03

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…

  • CVE-2018-0749HigJan 4, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.03

    The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…

  • CVE-2018-0748HigJan 4, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.03

    The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…

  • CVE-2017-0161HigSep 13, 2017
    Microsoft
    Windows Server 2008
    risk 0.54cvss 8.1epss 0.11

    The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it…

  • CVE-2017-8565HigJul 11, 2017
    Microsoft
    Windows Server 2008
    risk 0.54cvss 8.1epss 0.18

    Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka…

  • CVE-2017-0272HigMay 12, 2017
    Microsoft
    Windows Server 2008
    risk 0.54cvss 8.1epss 0.17

    The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote…

  • CVE-2017-0104HigMar 17, 2017
    Microsoft
    Windows Server 2008
    risk 0.54cvss 8.1epss 0.14

    The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."

  • CVE-2017-0100HigMar 17, 2017
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.05

    A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows…

  • CVE-2026-65796HigAug 11, 2026
    Microsoft
    Windows iSCSI Target Service
    risk 0.53cvss 8.1epss 0.01

    Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

  • CVE-2026-65789HigAug 11, 2026
    Microsoft
    Windows DNS
    risk 0.53cvss 8.1epss 0.00

    Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

  • CVE-2026-65679HigAug 11, 2026
    Microsoft
    Windows iSCSI Target Service
    risk 0.53cvss 8.1epss 0.01

    Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

  • CVE-2026-62889HigAug 11, 2026
    Microsoft
    Windows Secure Socket Tunneling Protocol (SSTP)
    risk 0.53cvss 8.1epss 0.01

    Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Page 43 of 256