Microsoft Windows Server 2016 vulnerabilities
4,536 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22
Vulnerabilities
Page 139 of 227
CVE-2020-1274P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1274 [HIGH] CVE-2020-1274: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1264P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1264 [HIGH] CVE-2020-1264: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1275P3HIGHCVSS 7.8v1903v1909+1 more2020-06-09
CVE-2020-1275 [HIGH] CVE-2020-1275: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1222P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1222 [HIGH] CVE-2020-1222: An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles m
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1309.
nvd
CVE-2020-0772P3HIGHCVSS 7.8v1803v1903+1 more2020-03-12
CVE-2020-0772 [HIGH] CVE-2020-0772: An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memor
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0806.
nvd
CVE-2020-1293P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1293 [HIGH] CVE-2020-1293: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1278.
nvd
CVE-2020-1257P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1257 [HIGH] CVE-2020-1257: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293.
nvd
CVE-2020-1278P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1278 [HIGH] CVE-2020-1278: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.
nvd
CVE-2021-26442P3HIGHCVSS 7.8v20h2v2004+1 more2021-10-13
CVE-2021-26442 [HIGH] CVE-2021-26442: Windows HTTP.sys Elevation of Privilege Vulnerability
Windows HTTP.sys Elevation of Privilege Vulnerability
nvd
CVE-2020-1387P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1387 [HIGH] CVE-2020-1387: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service hand
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1384P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1384 [HIGH] CVE-2020-1384: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) K
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.
nvd
CVE-2020-1438P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1438 [HIGH] CVE-2020-1438: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1428.
nvd
CVE-2020-1359P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1359 [HIGH] CVE-2020-1359: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) K
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.
nvd
CVE-2020-1427P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1427 [HIGH] CVE-2020-1427: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1373P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1373 [HIGH] CVE-2020-1373: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1390, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1390P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1390 [HIGH] CVE-2020-1390: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1324P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1324 [HIGH] CVE-2020-1324: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service whe
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1162.
nvd
CVE-2020-1270P3HIGHCVSS 7.8v1803v1903+2 more2020-06-09
CVE-2020-1270 [HIGH] CVE-2020-1270: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in me
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0867P3HIGHCVSS 7.8v1803v1903+1 more2020-03-12
CVE-2020-0867 [HIGH] CVE-2020-0867: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.
nvd
CVE-2020-0868P3HIGHCVSS 7.8v1803v1903+1 more2020-03-12
CVE-2020-0868 [HIGH] CVE-2020-0868: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.
nvd