VendorsMicrosoftwindows_server_2016all versions
Vulnerabilities

Microsoft Windows Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6183CVEs
CVE-2021-33755
Windows Hyper-V Denial of Service Vulnerability
Published 2021-07-14 · Modified
8.6EPSS 0.031
CVE-2025-27737
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Published 2025-04-08 · Analyzed
8.6EPSS 0.008
CVE-2025-48822
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
8.6EPSS 0.007
CVE-2019-0887
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Published 2019-07-15 · Modified
8.5EPSS 0.710
CVE-2020-0655
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Published 2020-02-11 · Modified
8.5EPSS 0.657
CVE-2022-41076
PowerShell Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.5EPSS 0.605
CVE-2017-11885
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and Remote Access service handles requests, aka "Windows RRAS Service Remote Code Execution Vulnerability".
Published 2017-12-12 · Modified
8.51 PoCEPSS 0.455
CVE-2019-0603
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions. The security update addresses the vulnerability by correcting how Windows Deployment Services TFTP Server handles objects in memory, aka 'Windows Deployment Services TFTP Server Remote Code Execution Vulnerability'.
Published 2019-04-08 · Modified
8.5EPSS 0.342
CVE-2019-1019
Microsoft Windows Security Feature Bypass Vulnerability
Published 2019-06-12 · Modified
8.51 PoCEPSS 0.151
CVE-2022-21893
Remote Desktop Protocol Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
8.5EPSS 0.079
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.056
CVE-2017-8633
Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Privilege Vulnerability".
Published 2017-08-08 · Modified
8.5EPSS 0.039
CVE-2018-8308
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-07-11 · Modified
8.5EPSS 0.038
CVE-2019-1043
Comctl32 Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
8.5EPSS 0.030
CVE-2022-22041
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.026
CVE-2022-22037
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.024
CVE-2022-26818
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.023
CVE-2022-26822
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26819
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26821
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26829
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-26820
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.019
CVE-2022-30163
Windows Hyper-V Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
8.5EPSS 0.019
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
8.5EPSS 0.018
CVE-2022-26817
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.017
CVE-2022-26814
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
8.5EPSS 0.017
CVE-2018-8639
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
Published 2018-12-12 · Analyzed
8.4KEVEPSS 0.222
CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
8.4KEVEPSS 0.216
CVE-2020-0910
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
8.4EPSS 0.092
CVE-2018-0965
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8439.
Published 2018-09-13 · Modified
8.4EPSS 0.051
CVE-2019-1389
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397, CVE-2019-1398.
Published 2019-11-12 · Modified
8.4EPSS 0.049
CVE-2019-1397
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1398.
Published 2019-11-12 · Modified
8.4EPSS 0.049
CVE-2019-0551
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550.
Published 2019-01-08 · Modified
8.4EPSS 0.045
CVE-2019-0550
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.
Published 2019-01-08 · Modified
8.4EPSS 0.045
CVE-2018-8489
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8490.
Published 2018-10-10 · Modified
8.4EPSS 0.044
CVE-2018-8439
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0965.
Published 2018-09-13 · Modified
8.4EPSS 0.043
CVE-2018-8490
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2018-8489.
Published 2018-10-10 · Modified
8.4EPSS 0.041
CVE-2019-0709
Windows Hyper-V Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
8.4EPSS 0.040
CVE-2019-1398
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1397.
Published 2019-11-12 · Modified
8.4EPSS 0.033
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
Published 2024-12-10 · Analyzed
8.4EPSS 0.015
← Prev27 / 155Next →