VendorsMicrosoftwindows_server_2016all versions
Vulnerabilities

Microsoft Windows Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6195CVEs
CVE-2024-26158
Microsoft Install Service Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.123
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-11-14 · Analyzed
7.8KEVEPSS 0.122
CVE-2021-43883
Windows Installer Elevation of Privilege Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.120
CVE-2021-26863
Windows Win32k Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.118
CVE-2022-29104
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.118
CVE-2023-36594
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.116
CVE-2018-8206
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-07-11 · Modified
7.8EPSS 0.115
CVE-2019-1159
Windows Kernel Elevation of Privilege Vulnerability
Published 2019-08-14 · Modified
7.8EPSS 0.113
CVE-2022-35756
Windows Kerberos Elevation of Privilege Vulnerability
Published 2023-05-31 · Modified
7.8EPSS 0.113
CVE-2017-0005
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.
Published 2017-03-17 · Analyzed
7.8KEVEPSS 0.110
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-02-14 · Analyzed
7.8KEVEPSS 0.109
CVE-2023-36900
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.106
CVE-2022-34729
Windows GDI Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.105
CVE-2024-38054
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.104
CVE-2021-33771
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-07-14 · Analyzed
7.8KEVEPSS 0.102
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
Published 2023-07-11 · Analyzed
7.8KEVEPSS 0.100
CVE-2017-0263
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2017-05-12 · Analyzed
7.8KEV1 PoCEPSS 0.100
CVE-2023-35359
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.099
CVE-2019-0879
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.
Published 2019-04-09 · Modified
7.8EPSS 0.098
CVE-2024-30087
Win32k Elevation of Privilege Vulnerability
Published 2024-06-11 · Modified
7.8EPSS 0.095
CVE-2024-26229
Windows CSC Service Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.094
CVE-2022-37989
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.093
CVE-2021-31959
Scripting Engine Memory Corruption Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.092
CVE-2022-24542
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.092
CVE-2022-37987
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.091
CVE-2019-1484
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
Published 2019-12-10 · Modified
7.8EPSS 0.089
CVE-2018-8213
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.
Published 2018-06-14 · Modified
7.8EPSS 0.086
CVE-2019-1388
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
Published 2019-11-12 · Analyzed
7.8KEVEPSS 0.086
CVE-2026-20860
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.084
CVE-2022-44683
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-12-13 · Modified
7.8EPSS 0.082
CVE-2022-41109
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-11-09 · Modified
7.8EPSS 0.081
CVE-2024-21437
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2024-03-12 · Analyzed
7.8EPSS 0.080
CVE-2023-23410
Windows HTTP.sys Elevation of Privilege Vulnerability
Published 2023-03-14 · Modified
7.8EPSS 0.080
CVE-2023-36731
Win32k Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.078
CVE-2022-23299
Windows PDEV Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
7.8EPSS 0.076
CVE-2020-0683
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
Published 2020-02-11 · Analyzed
7.8KEV1 PoCEPSS 0.076
CVE-2023-23416
Windows Cryptographic Services Remote Code Execution Vulnerability
Published 2023-03-14 · Modified
7.8EPSS 0.076
CVE-2022-38051
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.073
CVE-2020-1577
DirectWrite Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.071
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-04-15 · Analyzed
7.8KEVEPSS 0.071
← Prev36 / 155Next →