Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
115
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 128 of 209
CVE-2021-31199HIGHCVSS 7.8KEVfixed in 10.0.14393.4467≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31199 [HIGH] CVE-2021-31199: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
nvd
CVE-2021-31971HIGHCVSS 8.8≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31971 [HIGH] CVE-2021-31971: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2021-31969HIGHCVSS 7.8v20h2v20042021-06-08
CVE-2021-31969 [HIGH] CWE-269 CVE-2021-31969: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-31952HIGHCVSS 7.8v20h2v20042021-06-08
CVE-2021-31952 [HIGH] CVE-2021-31952: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-31976HIGHCVSS 7.5v20h2v2004+1 more2021-06-08
CVE-2021-31976 [HIGH] CVE-2021-31976: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31956HIGHCVSS 7.8KEV≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31956 [HIGH] Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-33742HIGHCVSS 8.8KEVfixed in 10.0.14393.4467≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-33742 [HIGH] CWE-787 CVE-2021-33742: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2021-31201HIGHCVSS 7.8KEVfixed in 10.0.14393.4467≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31201 [HIGH] CVE-2021-31201: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
nvd
CVE-2021-31953HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31953 [HIGH] CVE-2021-31953: Windows Filter Manager Elevation of Privilege Vulnerability Windows Filter Manager Elevation of Privilege Vulnerability
nvd
CVE-2021-31975HIGHCVSS 7.5v20h2v2004+1 more2021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31972MEDIUMCVSS 5.5v20h2v2004+1 more2021-06-08
CVE-2021-31972 [MEDIUM] CVE-2021-31972: Event Tracing for Windows Information Disclosure Vulnerability Event Tracing for Windows Information Disclosure Vulnerability
nvd
CVE-2021-31959MEDIUMCVSS 6.4≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31959 [MEDIUM] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2021-31970MEDIUMCVSS 5.5v20h2v2004+1 more2021-06-08
CVE-2021-31970 [MEDIUM] CWE-639 CVE-2021-31970: Windows TCP/IP Driver Security Feature Bypass Vulnerability Windows TCP/IP Driver Security Feature Bypass Vulnerability
nvd
CVE-2021-31960MEDIUMCVSS 5.5v20h2v20042021-06-08
CVE-2021-31960 [MEDIUM] CVE-2021-31960: Windows Bind Filter Driver Information Disclosure Vulnerability Windows Bind Filter Driver Information Disclosure Vulnerability
nvd
CVE-2021-26414MEDIUMCVSS 4.8≥ 10.0.0, < 10.0.14393.57862021-06-08
CVE-2021-26414 [MEDIUM] Windows DCOM Server Security Feature Bypass Windows DCOM Server Security Feature Bypass Windows DCOM Server Security Feature Bypass
cvelistv5
CVE-2021-28476CRITICALCVSS 9.9v20h2v1909+2 more2021-05-11
CVE-2021-28476 [CRITICAL] CVE-2021-28476: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2021-31169HIGHCVSS 7.8v20h2v20042021-05-11
CVE-2021-31169 [HIGH] CWE-269 CVE-2021-31169: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
CVE-2021-28455HIGHCVSS 8.8v20h2v1909+2 more2021-05-11
CVE-2021-28455 [HIGH] CVE-2021-28455: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
nvd
CVE-2021-31170HIGHCVSS 7.8v20h2v1909+1 more2021-05-11
CVE-2021-31170 [HIGH] CWE-416 CVE-2021-31170: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2021-31208HIGHCVSS 7.8v20h2v20042021-05-11
CVE-2021-31208 [HIGH] CVE-2021-31208: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd