VendorsMicrosoftwindows_server_2016all versions
Vulnerabilities

Microsoft Windows Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6195CVEs
CVE-2025-21204
Windows Process Activation Elevation of Privilege Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.070
CVE-2024-38052
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.070
CVE-2019-1064
Windows Elevation of Privilege Vulnerability
Published 2019-06-12 · Analyzed
7.8KEVEPSS 0.069
CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
Published 2020-07-14 · Modified
7.8EPSS 0.067
CVE-2023-35632
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2023-12-12 · Modified
7.8EPSS 0.065
CVE-2022-24474
Windows Win32k Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.065
CVE-2022-35750
Win32k Elevation of Privilege Vulnerability
Published 2023-05-31 · Modified
7.8EPSS 0.065
CVE-2019-1326
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
Published 2019-10-10 · Modified
7.8EPSS 0.065
CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8KEVEPSS 0.064
CVE-2022-30160
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2022-06-15 · Modified
7.8EPSS 0.063
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability
Published 2024-09-10 · Analyzed
7.8KEVEPSS 0.063
CVE-2022-22034
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.062
CVE-2018-0952
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
Published 2018-08-15 · Modified
7.81 PoCEPSS 0.062
CVE-2024-38244
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Published 2024-09-10 · Analyzed
7.8EPSS 0.062
CVE-2019-1069
Task Scheduler Elevation of Privilege Vulnerability
Published 2019-06-12 · Analyzed
7.8KEVEPSS 0.061
CVE-2022-24547
Windows Digital Media Receiver Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.060
CVE-2024-38241
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Published 2024-09-10 · Analyzed
7.8EPSS 0.060
CVE-2023-38142
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-09-12 · Analyzed
7.8EPSS 0.060
CVE-2024-38196
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8EPSS 0.060
CVE-2024-38125
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8EPSS 0.059
CVE-2019-0623
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Published 2019-03-06 · Modified
7.8EPSS 0.059
CVE-2020-16927
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.059
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability
Published 2024-05-14 · Analyzed
7.8KEVEPSS 0.056
CVE-2024-26182
Windows Kernel Elevation of Privilege Vulnerability
Published 2024-03-12 · Analyzed
7.8EPSS 0.056
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
Published 2023-02-14 · Analyzed
7.8KEVEPSS 0.056
CVE-2023-35386
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.055
CVE-2022-35751
Windows Hyper-V Elevation of Privilege Vulnerability
Published 2023-05-31 · Analyzed
7.8EPSS 0.055
CVE-2020-17087
Windows Kernel Local Elevation of Privilege Vulnerability
Published 2020-11-11 · Analyzed
7.8KEVEPSS 0.054
CVE-2019-1025
Windows Denial of Service Vulnerability
Published 2019-06-12 · Modified
7.8EPSS 0.054
CVE-2023-29371
Windows GDI Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
7.8EPSS 0.054
CVE-2020-1382
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1381.
Published 2020-07-14 · Modified
7.8EPSS 0.054
CVE-2024-38085
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.053
CVE-2019-0863
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Analyzed
7.8KEV1 PoCEPSS 0.052
CVE-2022-30220
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.052
CVE-2019-1476
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Published 2019-12-10 · Modified
7.81 PoCEPSS 0.051
CVE-2022-44675
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Published 2022-12-13 · Modified
7.8EPSS 0.050
CVE-2017-0100
A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."
Published 2017-03-17 · Modified
7.81 PoCEPSS 0.050
CVE-2019-0877
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.
Published 2019-04-09 · Modified
7.8EPSS 0.049
CVE-2019-1089
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.
Published 2019-07-15 · Modified
7.81 PoCEPSS 0.049
CVE-2020-1034
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.049
← Prev37 / 155Next →