Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
114
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 118 of 209
CVE-2021-42275HIGHCVSS 8.8v20h2v2004+1 more2021-11-10
CVE-2021-42275 [HIGH] CVE-2021-42275: Microsoft COM for Windows Remote Code Execution Vulnerability Microsoft COM for Windows Remote Code Execution Vulnerability
nvd
CVE-2021-42280HIGHCVSS 7.8v20h2v2004+1 more2021-11-10
CVE-2021-42280 [HIGH] CWE-269 CVE-2021-42280: Windows Feedback Hub Elevation of Privilege Vulnerability Windows Feedback Hub Elevation of Privilege Vulnerability
nvd
CVE-2021-42279HIGHCVSS 7.5v20h2v2004+1 more2021-11-10
CVE-2021-42279 [HIGH] CWE-787 CVE-2021-42279: Chakra Scripting Engine Memory Corruption Vulnerability Chakra Scripting Engine Memory Corruption Vulnerability
nvd
CVE-2021-42282HIGHCVSS 8.8v2004≥ 10.0.0, < 10.0.14393.47702021-11-10
CVE-2021-42282 [HIGH] CWE-269 CVE-2021-42282: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-42278HIGHCVSS 7.5KEVfixed in 10.0.14393.4770≥ 10.0.0, < 10.0.14393.47702021-11-10
CVE-2021-42278 [HIGH] CVE-2021-42278: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-38666HIGHCVSS 8.8v20h2v2004+1 more2021-11-10
CVE-2021-38666 [HIGH] CVE-2021-38666: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2021-42288MEDIUMCVSS 6.1v20h2v20042021-11-10
CVE-2021-42288 [MEDIUM] CVE-2021-42288: Windows Hello Security Feature Bypass Vulnerability Windows Hello Security Feature Bypass Vulnerability
nvd
CVE-2021-38631MEDIUMCVSS 4.4v20h2v2004+1 more2021-11-10
CVE-2021-38631 [MEDIUM] CVE-2021-38631: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2021-38665MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.14393.47702021-11-10
CVE-2021-38665 [MEDIUM] CVE-2021-38665: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2021-42274MEDIUMCVSS 6.5v20h2v2004+1 more2021-11-10
CVE-2021-42274 [MEDIUM] CVE-2021-42274: Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
nvd
CVE-2021-42284MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.14393.47702021-11-10
CVE-2021-42284 [MEDIUM] Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability
cvelistv5
CVE-2021-41371MEDIUMCVSS 4.4v20h2v2004+1 more2021-11-10
CVE-2021-41371 [MEDIUM] CVE-2021-41371: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2021-40461CRITICALCVSS 9.0v20042021-10-13
CVE-2021-40461 [CRITICAL] CVE-2021-40461: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2021-26441HIGHCVSS 7.8v2004≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-26441 [HIGH] CWE-269 CVE-2021-26441: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-40443HIGHCVSS 7.8v2004≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-40443 [HIGH] CWE-269 CVE-2021-40443: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-40465HIGHCVSS 7.8v2004≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-40489HIGHCVSS 7.8v20h2v2004+1 more2021-10-13
CVE-2021-40489 [HIGH] CWE-269 CVE-2021-40489: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-36953HIGHCVSS 7.5≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-36953 [HIGH] Windows TCP/IP Denial of Service Vulnerability Windows TCP/IP Denial of Service Vulnerability Windows TCP/IP Denial of Service Vulnerability
cvelistv5
CVE-2021-41342HIGHCVSS 8.8≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2021-40449HIGHCVSS 7.8KEVPoC≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-40449 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5