VendorsMicrosoftwindows_server_2016any version
Vulnerabilities

Microsoft Windows Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5805CVEs
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
Published 2023-02-14 · Analyzed
7.8KEVEPSS 0.056
CVE-2023-35386
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.055
CVE-2022-35751
Windows Hyper-V Elevation of Privilege Vulnerability
Published 2023-05-31 · Analyzed
7.8EPSS 0.055
CVE-2020-17087
Windows Kernel Local Elevation of Privilege Vulnerability
Published 2020-11-11 · Analyzed
7.8KEVEPSS 0.054
CVE-2019-1025
Windows Denial of Service Vulnerability
Published 2019-06-12 · Modified
7.8EPSS 0.054
CVE-2023-29371
Windows GDI Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
7.8EPSS 0.054
CVE-2024-38085
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.053
CVE-2019-0863
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Analyzed
7.8KEV1 PoCEPSS 0.052
CVE-2022-30220
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.052
CVE-2019-1476
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Published 2019-12-10 · Modified
7.81 PoCEPSS 0.051
CVE-2022-44675
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Published 2022-12-13 · Modified
7.8EPSS 0.050
CVE-2017-0100
A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."
Published 2017-03-17 · Modified
7.81 PoCEPSS 0.050
CVE-2019-0877
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.
Published 2019-04-09 · Modified
7.8EPSS 0.049
CVE-2019-1089
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.
Published 2019-07-15 · Modified
7.81 PoCEPSS 0.049
CVE-2020-1034
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.049
CVE-2023-29358
Windows GDI Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
7.8EPSS 0.047
CVE-2019-0543
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2019-01-08 · Analyzed
7.8KEV1 PoCEPSS 0.047
CVE-2020-1234
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
7.8EPSS 0.047
CVE-2026-24294
Windows SMB Server Elevation of Privilege Vulnerability
Published 2026-03-10 · Modified
7.8EPSS 0.047
CVE-2026-20840
Windows NTFS Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
7.8EPSS 0.047
CVE-2020-1027
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
Published 2020-04-15 · Analyzed
7.8KEVEPSS 0.045
CVE-2021-31979
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-07-14 · Analyzed
7.8KEVEPSS 0.045
CVE-2022-30147
Windows Installer Elevation of Privilege Vulnerability
Published 2022-06-15 · Modified
7.8EPSS 0.045
CVE-2024-30032
Windows DWM Core Library Elevation of Privilege Vulnerability
Published 2024-05-14 · Analyzed
7.8EPSS 0.045
CVE-2024-38100
Windows File Explorer Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.045
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
Published 2024-11-12 · Analyzed
7.8EPSS 0.045
CVE-2024-20653
Microsoft Common Log File System Elevation of Privilege Vulnerability
Published 2024-01-09 · Modified
7.8EPSS 0.045
CVE-2026-24289
Windows Kernel Elevation of Privilege Vulnerability
Published 2026-03-10 · Analyzed
7.8EPSS 0.045
CVE-2020-1217
An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulnerability'.
Published 2020-06-09 · Modified
7.8EPSS 0.044
CVE-2022-34699
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-08-09 · Modified
7.8EPSS 0.044
CVE-2019-0730
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2019-0731
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.043
CVE-2019-0836
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.043
CVE-2024-30025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2024-05-14 · Modified
7.8EPSS 0.043
CVE-2024-30091
Win32k Elevation of Privilege Vulnerability
Published 2024-06-11 · Modified
7.8EPSS 0.043
CVE-2024-20683
Win32k Elevation of Privilege Vulnerability
Published 2024-01-09 · Modified
7.8EPSS 0.042
CVE-2018-8611
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-12-12 · Analyzed
7.8KEVEPSS 0.042
CVE-2025-30388
Windows Graphics Component Remote Code Execution Vulnerability
Published 2025-05-13 · Analyzed
7.8EPSS 0.042
CVE-2019-0859
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
Published 2019-04-09 · Analyzed
7.8KEVEPSS 0.042
← Prev36 / 146Next →