VendorsMicrosoftwindows_server_2016all versions
Vulnerabilities

Microsoft Windows Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6201CVEs
CVE-2021-42276
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
7.8EPSS 0.025
CVE-2021-40465
Windows Text Shaping Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2026-21519
Desktop Window Manager Elevation of Privilege Vulnerability
Published 2026-02-10 · Analyzed
7.8KEVEPSS 0.025
CVE-2025-24052
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.025
CVE-2025-59517
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Published 2025-12-09 · Analyzed
7.8EPSS 0.025
CVE-2021-34489
DirectWrite Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
7.8EPSS 0.025
CVE-2021-26900
Windows Win32k Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.024
CVE-2020-1528
Windows Radio Manager API Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.024
CVE-2021-34530
Windows Graphics Component Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2020-16939
Group Policy Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.024
CVE-2025-60705
Windows Client-Side Caching Elevation of Privilege Vulnerability
Published 2025-11-11 · Analyzed
7.8EPSS 0.024
CVE-2021-40476
Windows AppContainer Elevation Of Privilege Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.024
CVE-2017-0078
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0080
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0081
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0024
The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0026
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2019-0943
Windows ALPC Elevation of Privilege Vulnerability
Published 2019-06-12 · Modified
7.81 PoCEPSS 0.024
CVE-2021-34521
Raw Image Extension Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
7.8EPSS 0.024
CVE-2017-8465
Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8468.
Published 2017-06-15 · Modified
7.8EPSS 0.023
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.023
CVE-2020-0753
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.
Published 2020-02-11 · Modified
7.8EPSS 0.023
CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.023
CVE-2025-54916
Windows NTFS Remote Code Execution Vulnerability
Published 2025-09-09 · Analyzed
7.8EPSS 0.023
CVE-2019-0880
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Published 2019-07-15 · Analyzed
7.8KEVEPSS 0.023
CVE-2021-36937
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.023
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-11-09 · Analyzed
7.8KEVEPSS 0.023
CVE-2021-27089
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.023
CVE-2025-58722
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.023
CVE-2020-0887
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
Published 2020-03-12 · Modified
7.8EPSS 0.022
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
Published 2025-12-09 · Modified
7.8EPSS 0.022
CVE-2022-22027
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.022
CVE-2022-30206
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.022
CVE-2025-21299
Windows Kerberos Security Feature Bypass Vulnerability
Published 2025-01-14 · Analyzed
7.8EPSS 0.022
CVE-2025-62472
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published 2025-12-09 · Analyzed
7.8EPSS 0.022
CVE-2020-1149
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.022
CVE-2021-34441
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2021-07-16 · Modified
7.8EPSS 0.022
CVE-2020-1164
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158.
Published 2020-05-21 · Modified
7.8EPSS 0.022
CVE-2021-34438
Windows Font Driver Host Remote Code Execution Vulnerability
Published 2021-07-16 · Modified
7.8EPSS 0.022
← Prev42 / 156Next →