Microsoft Windows Server 2016 vulnerabilities
4,181 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
4,181
CISA KEV
116
actively exploited
Public exploits
119
Exploited in wild
109
Severity breakdown
CRITICAL114HIGH2918MEDIUM1130LOW19
Vulnerabilities
Page 12 of 210
CVE-2025-60719HIGHCVSS 7.0fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60719 [HIGH] CWE-822 CVE-2025-60719: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-62452HIGHCVSS 8.0fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-62452 [HIGH] CWE-122 CVE-2025-62452: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
cvelistv5nvd
CVE-2025-60714HIGHCVSS 7.8fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60714 [HIGH] CWE-122 CVE-2025-60714: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59512HIGHCVSS 7.8fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-59512 [HIGH] CWE-284 CVE-2025-59512: Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attac
Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-60709HIGHCVSS 7.8fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60709 [HIGH] CWE-125 CVE-2025-60709: Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate
Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-60715HIGHCVSS 8.0fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60715 [HIGH] CWE-122 CVE-2025-60715: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
cvelistv5nvd
CVE-2025-60713HIGHCVSS 7.8fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60713 [HIGH] CWE-822 CVE-2025-60713: Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authoriz
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-60704HIGHCVSS 7.5fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges
Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
cvelistv5nvd
CVE-2025-62208MEDIUMCVSS 5.5fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-11-11
CVE-2025-62208 [MEDIUM] CWE-532 CVE-2025-62208: Insertion of sensitive information into log file in Windows License Manager allows an authorized att
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
cvelistv5nvd
CVE-2025-60708MEDIUMCVSS 6.5fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60708 [MEDIUM] CWE-822 CVE-2025-60708: Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service lo
Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.
cvelistv5nvd
CVE-2025-62209MEDIUMCVSS 5.5fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-11-11
CVE-2025-62209 [MEDIUM] CWE-532 CVE-2025-62209: Insertion of sensitive information into log file in Windows License Manager allows an authorized att
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
cvelistv5nvd
CVE-2025-59510MEDIUMCVSS 5.5fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-59510 [MEDIUM] CWE-59 CVE-2025-59510: Improper link resolution before file access ('link following') in Windows Routing and Remote Access
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.
cvelistv5nvd
CVE-2025-60706MEDIUMCVSS 5.5fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60706 [MEDIUM] CWE-125 CVE-2025-60706: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
cvelistv5nvd
CVE-2025-59513MEDIUMCVSS 5.5fixed in 10.0.14393.8594≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-59513 [MEDIUM] CWE-125 CVE-2025-59513: Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to discl
Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.
cvelistv5nvd
CVE-2025-59287CRITICALCVSS 9.8KEVPoCfixed in 10.0.14393.8524≥ 10.0.14393.0, < 10.0.14393.85242025-10-14
CVE-2025-59287 [CRITICAL] CWE-502 CVE-2025-59287: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker t
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
cvelistv5nvd
CVE-2025-58730HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-58730 [HIGH] CWE-416 CVE-2025-58730: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-58725HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-58725 [HIGH] CWE-122 CVE-2025-58725: Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59278HIGHCVSS 7.8fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55692HIGHCVSS 7.8fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-55692 [HIGH] CWE-20 CVE-2025-55692: Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privil
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59230HIGHCVSS 7.8KEV≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59230 [HIGH] CWE-284 CVE-2025-59230: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
cvelistv5nvd