VendorsMicrosoftwindows_server_2016any version
Vulnerabilities

Microsoft Windows Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5823CVEs
CVE-2024-38127
Windows Hyper-V Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
7.8EPSS 0.016
CVE-2024-38062
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.8EPSS 0.016
CVE-2020-1170
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.
Published 2020-06-09 · Modified
7.8EPSS 0.016
CVE-2021-28315
Windows Media Video Decoder Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.016
CVE-2023-36718
Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
Published 2023-10-10 · Modified
7.8EPSS 0.016
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2025-02-11 · Analyzed
7.8KEVEPSS 0.016
CVE-2016-7260
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.016
CVE-2022-26929
.NET Framework Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.016
CVE-2020-16940
Windows - User Profile Service Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.016
CVE-2017-0077
The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain information, or in Windows 7 and later, cause denial of service, aka "Win32k Information Disclosure Vulnerability."
Published 2017-05-12 · Modified
7.8EPSS 0.015
CVE-2020-1377
Windows Registry Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.015
CVE-2020-0642
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.
Published 2020-01-14 · Modified
7.8EPSS 0.015
CVE-2018-8164
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8120, CVE-2018-8124, CVE-2018-8166.
Published 2018-05-09 · Modified
7.8EPSS 0.015
CVE-2022-21838
Windows Cleanup Manager Elevation of Privilege Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.015
CVE-2020-1474
Windows Image Acquisition Service Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.015
CVE-2020-0754
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0753.
Published 2020-02-11 · Modified
7.8EPSS 0.015
CVE-2017-0050
The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."
Published 2017-03-17 · Modified
7.8EPSS 0.015
CVE-2021-24096
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.015
CVE-2016-7292
The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Installer Elevation of Privilege Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.015
CVE-2022-35743
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Published 2023-05-31 · Modified
7.8EPSS 0.015
CVE-2021-27077
Windows Win32k Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.014
CVE-2016-7238
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges via a crafted application, aka "Windows NTLM Elevation of Privilege Vulnerability."
Published 2016-11-10 · Modified
7.8EPSS 0.014
CVE-2020-17035
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-11-11 · Modified
7.8EPSS 0.014
CVE-2019-1393
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434.
Published 2019-11-12 · Modified
7.8EPSS 0.014
CVE-2020-16920
Windows Application Compatibility Client Library Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.014
CVE-2019-1214
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
Published 2019-09-11 · Analyzed
7.8KEVEPSS 0.014
CVE-2019-1408
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1393, CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1434.
Published 2019-11-12 · Modified
7.8EPSS 0.014
CVE-2025-32701
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2025-05-13 · Analyzed
7.8KEVEPSS 0.014
CVE-2017-0056
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.014
CVE-2022-30166
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Published 2022-06-15 · Modified
7.8EPSS 0.014
CVE-2021-41335
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.014
CVE-2021-31188
Windows Graphics Component Elevation of Privilege Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.014
CVE-2020-0670
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672.
Published 2020-02-11 · Modified
7.8EPSS 0.014
CVE-2016-7271
The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.014
CVE-2018-8165
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Published 2018-05-09 · Modified
7.8EPSS 0.014
CVE-2021-38639
Win32k Elevation of Privilege Vulnerability
Published 2021-09-15 · Modified
7.8EPSS 0.014
CVE-2019-0627
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.
Published 2019-03-06 · Modified
7.8EPSS 0.013
CVE-2018-8562
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-11-14 · Modified
7.8EPSS 0.013
CVE-2022-37956
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.013
CVE-2025-32714
Windows Installer Elevation of Privilege Vulnerability
Published 2025-06-10 · Analyzed
7.8EPSS 0.013
← Prev42 / 146Next →