Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
114
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 114 of 209
CVE-2022-21850HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21850 [HIGH] CVE-2022-21850: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2022-21833HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21833 [HIGH] CVE-2022-21833: Virtual Machine IDE Drive Elevation of Privilege Vulnerability Virtual Machine IDE Drive Elevation of Privilege Vulnerability
nvd
CVE-2022-21848HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21848 [HIGH] CVE-2022-21848: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2022-21908HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21908 [HIGH] CVE-2022-21908: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2022-21902HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21902 [HIGH] CWE-269 CVE-2022-21902: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-21834HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21834 [HIGH] CVE-2022-21834: Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21868HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21868 [HIGH] CVE-2022-21868: Windows Devices Human Interface Elevation of Privilege Vulnerability Windows Devices Human Interface Elevation of Privilege Vulnerability
nvd
CVE-2022-21905HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21905 [HIGH] CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-21879HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21879 [HIGH] CVE-2022-21879: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-21862HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21862 [HIGH] CVE-2022-21862: Windows Application Model Core API Elevation of Privilege Vulnerability Windows Application Model Core API Elevation of Privilege Vulnerability
nvd
CVE-2022-21836HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21836 [HIGH] Windows Certificate Spoofing Vulnerability Windows Certificate Spoofing Vulnerability Windows Certificate Spoofing Vulnerability
cvelistv5
CVE-2022-21871HIGHCVSS 7.8v20h2≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21871 [HIGH] CVE-2022-21871: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
nvd
CVE-2022-21867HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21867 [HIGH] CVE-2022-21867: Windows Push Notifications Apps Elevation of Privilege Vulnerability Windows Push Notifications Apps Elevation of Privilege Vulnerability
nvd
CVE-2022-21878HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21878 [HIGH] CVE-2022-21878: Windows Geolocation Service Remote Code Execution Vulnerability Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2022-21922HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21922 [HIGH] CVE-2022-21922: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21885HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21885 [HIGH] CVE-2022-21885: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-21884HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21884 [HIGH] CVE-2022-21884: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21914HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21914 [HIGH] CVE-2022-21914: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-21838HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability Windows Cleanup Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-21870HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21870 [HIGH] CVE-2022-21870: Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
nvd