Microsoft Windows Server 2016 vulnerabilities

4,181 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs

4,181

CISA KEV

116

actively exploited

Public exploits

119

Exploited in wild

109

Severity breakdown

CRITICAL114HIGH2918MEDIUM1130LOW19

Vulnerabilities

Page 14 of 210

CVE-2025-58716HIGHCVSS 8.8≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58716 [HIGH] CWE-20 CVE-2025-58716: Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privi Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-58734HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58734 [HIGH] CWE-416 CVE-2025-58734: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

cvelistv5nvd

CVE-2025-58737HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58737 [HIGH] CWE-416 CVE-2025-58737: Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

cvelistv5nvd

CVE-2025-59205HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59205 [HIGH] CWE-362 CVE-2025-59205: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-59200HIGHCVSS 7.7≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59200 [HIGH] CWE-73 CVE-2025-59200: Concurrent execution using shared resource with improper synchronization ('race condition') in Data Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.

cvelistv5nvd

CVE-2025-55678HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-59242HIGHCVSS 7.8≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59242 [HIGH] CWE-122 CVE-2025-59242: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-58714HIGHCVSS 7.8≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58714 [HIGH] CWE-284 CVE-2025-58714: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-58733HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58733 [HIGH] CWE-416 CVE-2025-58733: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

cvelistv5nvd

CVE-2025-55328HIGHCVSS 7.0fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-55328 [HIGH] CWE-362 CVE-2025-55328: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-59208HIGHCVSS 7.1≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59208 [HIGH] CWE-125 CVE-2025-59208: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information o Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

cvelistv5nvd

CVE-2025-59295HIGHCVSS 8.8≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

cvelistv5nvd

CVE-2025-58726HIGHCVSS 7.5≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

cvelistv5nvd

CVE-2025-55687HIGHCVSS 7.0fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-55687 [HIGH] CWE-362 CVE-2025-55687: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-58732HIGHCVSS 7.0≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58732 [HIGH] CWE-416 CVE-2025-58732: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

cvelistv5nvd

CVE-2025-59198MEDIUMCVSS 5.0fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59198 [MEDIUM] CWE-20 CVE-2025-59198: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to den Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

cvelistv5nvd

CVE-2025-59259MEDIUMCVSS 6.5≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59259 [MEDIUM] CWE-1287 CVE-2025-59259: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

cvelistv5nvd

CVE-2025-58739MEDIUMCVSS 6.5≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-58739 [MEDIUM] CWE-200 CVE-2025-58739: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

cvelistv5nvd

CVE-2025-55333MEDIUMCVSS 4.6fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-55333 [MEDIUM] CWE-1023 CVE-2025-55333: Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to b Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

cvelistv5nvd

CVE-2025-59184MEDIUMCVSS 5.5≤ 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14

CVE-2025-59184 [MEDIUM] CWE-200 CVE-2025-59184: Exposure of sensitive information to an unauthorized actor in Windows High Availability Services all Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally.

cvelistv5nvd

← Previous14 / 210Next →