VendorsMicrosoftwindows_server_2016any version
Vulnerabilities

Microsoft Windows Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5805CVEs
CVE-2026-21533
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Published 2026-02-10 · Analyzed
7.8KEVEPSS 0.041
CVE-2024-26211
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2024-04-09 · Analyzed
7.8EPSS 0.041
CVE-2021-27095
Windows Media Video Decoder Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.041
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2021-09-15 · Analyzed
7.8KEVEPSS 0.040
CVE-2022-35761
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-08-09 · Modified
7.8EPSS 0.040
CVE-2026-50649
.NET Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2026-50646
.NET Framework Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
Published 2024-03-12 · Analyzed
7.8KEVEPSS 0.040
CVE-2023-36743
Win32k Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.040
CVE-2017-8591
Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution Vulnerability".
Published 2017-08-08 · Modified
7.8EPSS 0.040
CVE-2020-1466
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
CVE-2021-26416
Windows Hyper-V Denial of Service Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.039
CVE-2022-21880
Windows GDI+ Information Disclosure Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.039
CVE-2020-1252
Windows Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.039
CVE-2020-1512
Windows State Repository Service Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
CVE-2022-24507
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
7.8EPSS 0.039
CVE-2020-1378
Windows Registry Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8KEVEPSS 0.038
CVE-2020-16923
Microsoft Graphics Components Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.038
CVE-2019-0732
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.038
CVE-2017-8714
The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability".
Published 2017-09-13 · Modified
7.8EPSS 0.038
CVE-2021-1665
GDI+ Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.038
CVE-2023-38144
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-09-12 · Analyzed
7.8EPSS 0.037
CVE-2024-38141
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8EPSS 0.037
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Published 2025-02-11 · Analyzed
7.8EPSS 0.037
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2023-09-12 · Analyzed
7.8EPSS 0.037
CVE-2019-0735
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.037
CVE-2021-31975
Server for NFS Information Disclosure Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.037
CVE-2021-31976
Server for NFS Information Disclosure Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.037
CVE-2020-1309
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1222.
Published 2020-06-09 · Modified
7.8EPSS 0.037
CVE-2026-85880
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2026-09-08 · Analyzed
7.8KEVEPSS 0.036
CVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
Published 2019-11-12 · Analyzed
7.8KEVEPSS 0.036
CVE-2023-21688
NT OS Kernel Elevation of Privilege Vulnerability
Published 2023-02-14 · Modified
7.8EPSS 0.036
CVE-2024-43560
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Published 2024-10-08 · Analyzed
7.8EPSS 0.036
CVE-2023-24912
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2023-04-11 · Modified
7.8EPSS 0.036
CVE-2021-26415
Windows Installer Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.036
CVE-2020-1487
Media Foundation Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.036
CVE-2023-35380
Windows Kernel Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.035
CVE-2023-21552
Windows GDI Elevation of Privilege Vulnerability
Published 2023-01-10 · Modified
7.8EPSS 0.035
CVE-2026-50509
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.035
← Prev37 / 146Next →