VendorsMicrosoftwindows_server_2016any version
Vulnerabilities

Microsoft Windows Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5805CVEs
CVE-2022-41076
PowerShell Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.5EPSS 0.605
CVE-2017-11885
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and Remote Access service handles requests, aka "Windows RRAS Service Remote Code Execution Vulnerability".
Published 2017-12-12 · Modified
8.51 PoCEPSS 0.455
CVE-2019-0603
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions. The security update addresses the vulnerability by correcting how Windows Deployment Services TFTP Server handles objects in memory, aka 'Windows Deployment Services TFTP Server Remote Code Execution Vulnerability'.
Published 2019-04-08 · Modified
8.5EPSS 0.342
CVE-2019-1019
Microsoft Windows Security Feature Bypass Vulnerability
Published 2019-06-12 · Modified
8.51 PoCEPSS 0.151
CVE-2022-21893
Remote Desktop Protocol Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
8.5EPSS 0.079
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.056
CVE-2017-8633
Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Privilege Vulnerability".
Published 2017-08-08 · Modified
8.5EPSS 0.039
CVE-2018-8308
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-07-11 · Modified
8.5EPSS 0.038
CVE-2019-1043
Comctl32 Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
8.5EPSS 0.030
CVE-2022-22041
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.026
CVE-2022-22037
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.024
CVE-2022-26818
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.023
CVE-2022-26829
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26821
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26820
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26819
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26822
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-30163
Windows Hyper-V Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
8.5EPSS 0.019
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.018
CVE-2022-26814
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.017
CVE-2022-26817
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.017
CVE-2018-8639
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
Published 2018-12-12 · Analyzed
8.4KEVEPSS 0.222
CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
8.4KEVEPSS 0.216
CVE-2018-0965
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8439.
Published 2018-09-13 · Modified
8.4EPSS 0.051
CVE-2019-1397
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1398.
Published 2019-11-12 · Modified
8.4EPSS 0.049
CVE-2019-1389
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397, CVE-2019-1398.
Published 2019-11-12 · Modified
8.4EPSS 0.049
CVE-2019-0551
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550.
Published 2019-01-08 · Modified
8.4EPSS 0.045
CVE-2018-8489
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8490.
Published 2018-10-10 · Modified
8.4EPSS 0.044
CVE-2018-8439
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0965.
Published 2018-09-13 · Modified
8.4EPSS 0.043
CVE-2018-8490
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2018-8489.
Published 2018-10-10 · Modified
8.4EPSS 0.041
CVE-2019-0709
Windows Hyper-V Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
8.4EPSS 0.040
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
Published 2024-12-10 · Analyzed
8.4EPSS 0.015
CVE-2019-0620
Windows Hyper-V Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
8.4EPSS 0.014
CVE-2024-29050
Windows Cryptographic Services Remote Code Execution Vulnerability
Published 2024-04-09 · Analyzed
8.4EPSS 0.013
CVE-2024-37984
Secure Boot Security Feature Bypass Vulnerability
Published 2024-07-09 · Modified
8.4EPSS 0.007
CVE-2022-30222
Windows Shell Remote Code Execution Vulnerability
Published 2022-07-12 · Modified
8.4EPSS 0.007
CVE-2021-26864
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
8.4EPSS 0.007
CVE-2025-33067
Windows Task Scheduler Elevation of Privilege Vulnerability
Published 2025-06-10 · Analyzed
8.4EPSS 0.005
CVE-2026-56189
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
8.4EPSS 0.004
CVE-2026-69638
Windows NTFS Remote Code Execution Vulnerability
Published 2026-09-08 · Analyzed
8.4EPSS 0.004
← Prev26 / 146Next →