Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
115
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 127 of 209
CVE-2021-34507MEDIUMCVSS 6.5v20h2v2004+1 more2021-07-14
CVE-2021-34507 [MEDIUM] CVE-2021-34507: Windows Remote Assistance Information Disclosure Vulnerability Windows Remote Assistance Information Disclosure Vulnerability
nvd
CVE-2021-33760MEDIUMCVSS 5.5v1909v20042021-07-14
CVE-2021-33760 [MEDIUM] CVE-2021-33760: Media Foundation Information Disclosure Vulnerability Media Foundation Information Disclosure Vulnerability
nvd
CVE-2021-33763MEDIUMCVSS 5.5v20h2v2004+1 more2021-07-14
CVE-2021-33763 [MEDIUM] CVE-2021-33763: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-33764MEDIUMCVSS 5.9v20h2v2004+1 more2021-07-14
CVE-2021-33764 [MEDIUM] CVE-2021-33764: Windows Key Distribution Center Information Disclosure Vulnerability Windows Key Distribution Center Information Disclosure Vulnerability
nvd
CVE-2021-34491MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.14393.45302021-07-14
CVE-2021-34491 [MEDIUM] Win32k Information Disclosure Vulnerability Win32k Information Disclosure Vulnerability Win32k Information Disclosure Vulnerability
cvelistv5
CVE-2021-34493MEDIUMCVSS 6.7v20h2v2004+1 more2021-07-14
CVE-2021-34493 [MEDIUM] CWE-269 CVE-2021-34493: Windows Partition Management Driver Elevation of Privilege Vulnerability Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-33783MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.14393.45302021-07-14
CVE-2021-33783 [MEDIUM] Windows SMB Information Disclosure Vulnerability Windows SMB Information Disclosure Vulnerability Windows SMB Information Disclosure Vulnerability
cvelistv5
CVE-2021-33745MEDIUMCVSS 6.5v20h2v2004+1 more2021-07-14
CVE-2021-33745 [MEDIUM] CVE-2021-33745: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2021-34499MEDIUMCVSS 6.5v20h2v2004+1 more2021-07-14
CVE-2021-34499 [MEDIUM] CVE-2021-34499: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2021-34496MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.14393.45302021-07-14
CVE-2021-34496 [MEDIUM] Windows GDI Information Disclosure Vulnerability Windows GDI Information Disclosure Vulnerability Windows GDI Information Disclosure Vulnerability
cvelistv5
CVE-2021-34527HIGHCVSS 8.8KEVPoCfixed in 10.0.14393.4470≥ 10.0.0, < 10.0.14393.44702021-07-02
CVE-2021-34527 [HIGH] CVE-2021-34527: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDAT
nvd
CVE-2021-31962CRITICALCVSS 9.8v20h2v2004+1 more2021-06-08
CVE-2021-31962 [CRITICAL] CVE-2021-31962: Kerberos AppContainer Security Feature Bypass Vulnerability Kerberos AppContainer Security Feature Bypass Vulnerability
nvd
CVE-2021-31968HIGHCVSS 7.5v20h2v2004+1 more2021-06-08
CVE-2021-31968 [HIGH] CVE-2021-31968: Windows Remote Desktop Services Denial of Service Vulnerability Windows Remote Desktop Services Denial of Service Vulnerability
nvd
CVE-2021-31958HIGHCVSS 7.5≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31958 [HIGH] Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-31951HIGHCVSS 7.8v20h2v20042021-06-08
CVE-2021-31951 [HIGH] CVE-2021-31951: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-31973HIGHCVSS 7.8v20h2v2004+1 more2021-06-08
CVE-2021-31973 [HIGH] CVE-2021-31973: Windows GPSVC Elevation of Privilege Vulnerability Windows GPSVC Elevation of Privilege Vulnerability
nvd
CVE-2021-31977HIGHCVSS 8.6≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31977 [HIGH] Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability
cvelistv5
CVE-2021-31954HIGHCVSS 7.8v20h2v2004+1 more2021-06-08
CVE-2021-31954 [HIGH] CWE-269 CVE-2021-31954: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-1675HIGHCVSS 7.8KEVPoCfixed in 10.0.14393.4467≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-1675 [HIGH] CVE-2021-1675: Windows Print Spooler Remote Code Execution Vulnerability Windows Print Spooler Remote Code Execution Vulnerability
nvd
CVE-2021-31974HIGHCVSS 7.5≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31974 [HIGH] Server for NFS Denial of Service Vulnerability Server for NFS Denial of Service Vulnerability Server for NFS Denial of Service Vulnerability
cvelistv5