VendorsMicrosoftwindows_server_2016any version
Vulnerabilities

Microsoft Windows Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5823CVEs
CVE-2021-34441
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2021-07-16 · Modified
7.8EPSS 0.022
CVE-2020-1125
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.022
CVE-2020-1149
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.022
CVE-2020-1164
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158.
Published 2020-05-21 · Modified
7.8EPSS 0.022
CVE-2016-7221
Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via unspecified vectors, aka "Windows IME Elevation of Privilege Vulnerability."
Published 2016-11-10 · Modified
7.8EPSS 0.022
CVE-2025-24993
Windows NTFS Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8KEVEPSS 0.022
CVE-2025-32709
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.021
CVE-2016-7259
The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.021
CVE-2022-37955
Windows Group Policy Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.021
CVE-2020-0965
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
7.8EPSS 0.021
CVE-2022-22024
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.021
CVE-2021-26882
Remote Access API Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.021
CVE-2019-1422
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1423.
Published 2019-11-12 · Modified
7.8EPSS 0.021
CVE-2021-43232
Windows Event Tracing Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.021
CVE-2021-43234
Windows Fax Service Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.021
CVE-2022-26917
Windows Fax Compose Form Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.021
CVE-2022-26918
Windows Fax Compose Form Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.021
CVE-2022-26916
Windows Fax Compose Form Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.021
CVE-2019-0838
An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839.
Published 2019-04-09 · Modified
7.8EPSS 0.021
CVE-2017-0189
An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188.
Published 2017-04-12 · Modified
7.8EPSS 0.021
CVE-2021-41340
Windows Graphics Component Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.020
CVE-2021-41331
Windows Media Audio Decoder Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.020
CVE-2024-49019
Active Directory Certificate Services Elevation of Privilege Vulnerability
Published 2024-11-12 · Analyzed
7.8EPSS 0.020
CVE-2025-49683
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.81 PoCEPSS 0.019
CVE-2018-8401
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8405, CVE-2018-8406.
Published 2018-08-15 · Modified
7.8EPSS 0.019
CVE-2022-24494
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.019
CVE-2019-0797
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
Published 2019-04-09 · Analyzed
7.8KEVEPSS 0.019
CVE-2020-17057
Windows Win32k Elevation of Privilege Vulnerability
Published 2020-11-11 · Modified
7.8EPSS 0.019
CVE-2017-0025
The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047.
Published 2017-03-17 · Modified
7.8EPSS 0.018
CVE-2023-35317
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Published 2023-07-11 · Modified
7.8EPSS 0.018
CVE-2021-43229
Windows NTFS Elevation of Privilege Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.018
CVE-2019-1130
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
Published 2019-07-29 · Analyzed
7.8KEVEPSS 0.017
CVE-2025-47987
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Published 2025-07-08 · Analyzed
7.81 PoCEPSS 0.017
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Published 2022-10-11 · Analyzed
7.8KEVEPSS 0.017
CVE-2020-1566
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.017
CVE-2020-1191
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020-1185, CVE-2020-1186, CVE-2020-1187, CVE-2020-1188, CVE-2020-1189, CVE-2020-1190.
Published 2020-05-21 · Modified
7.8EPSS 0.017
CVE-2019-0685
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859.
Published 2019-04-09 · Modified
7.8EPSS 0.016
CVE-2017-8720
The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8675.
Published 2017-09-13 · Modified
7.8EPSS 0.016
CVE-2024-38107
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8KEVEPSS 0.016
CVE-2026-25166
Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
Published 2026-03-10 · Analyzed
7.8EPSS 0.016
← Prev41 / 146Next →