cbcvebase.

Microsoft Windows Server 2016 vulnerabilities

4,536 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22

Vulnerabilities

Page 143 of 227
CVE-2021-41339P3HIGHCVSS 7.8v20h2v20042021-10-13
CVE-2021-41339 [HIGH] CWE-269 CVE-2021-41339: Microsoft DWM Core Library Elevation of Privilege Vulnerability Microsoft DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2021-36957P3HIGHCVSS 7.8v20h2v2004+1 more2021-11-10
CVE-2021-36957 [HIGH] CWE-269 CVE-2021-36957: Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Elevation of Privilege Vulnerability
nvd
CVE-2021-42286P3HIGHCVSS 7.8v20042021-11-10
CVE-2021-42286 [HIGH] CWE-269 CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerabi Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability
nvd
CVE-2021-41334P3HIGHCVSS 7.8v20h2v20042021-10-13
CVE-2021-41334 [HIGH] CWE-269 CVE-2021-41334: Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Elevation of Privilege Vulnerability
nvd
CVE-2025-21331P3HIGHCVSS 7.3fixed in 10.0.14393.7699≥ 10.0.14393.0, < 10.0.14393.76992025-01-14
CVE-2025-21331 [HIGH] CWE-59 CVE-2025-21331: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-21820P3HIGHCVSS 7.4≥ 10.0.14393.0, < 10.0.14393.57172023-02-14
CVE-2023-21820 [HIGH] CWE-126 CVE-2023-21820: Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2023-32021P3HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.59892023-06-14
CVE-2023-32021 [HIGH] CVE-2023-32021: Windows SMB Witness Service Security Feature Bypass Vulnerability Windows SMB Witness Service Security Feature Bypass Vulnerability
nvd
CVE-2026-40413P3HIGHCVSS 7.4fixed in 10.0.14393.9140≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-40413 [HIGH] CWE-476 CVE-2026-40413: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
cvelistv5nvd
CVE-2022-26818P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26818 [MEDIUM] CVE-2022-26818: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-24082P3MEDIUMCVSS 6.5v20h2v1909+2 more2021-02-25
CVE-2021-24082 [MEDIUM] CVE-2021-24082: Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
nvd
CVE-2021-27063P3HIGHCVSS 7.5v20h2v1909+2 more2021-03-11
CVE-2021-27063 [HIGH] CVE-2021-27063: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2021-33779P3MEDIUMCVSS 6.5v20h2v2004+1 more2021-07-14
CVE-2021-33779 [MEDIUM] CVE-2021-33779: Windows AD FS Security Feature Bypass Vulnerability Windows AD FS Security Feature Bypass Vulnerability
nvd
CVE-2022-26829P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26829 [MEDIUM] CWE-362 CVE-2022-26829: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26821P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26821 [MEDIUM] CWE-362 CVE-2022-26821: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26822P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26822 [MEDIUM] CWE-362 CVE-2022-26822: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26819P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26819 [MEDIUM] CWE-362 CVE-2022-26819: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26820P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26820 [MEDIUM] CWE-362 CVE-2022-26820: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26817P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26817 [MEDIUM] CWE-362 CVE-2022-26817: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26814P3MEDIUMCVSS 6.6v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26814 [MEDIUM] CWE-362 CVE-2022-26814: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2025-48821P3HIGHCVSS 7.1fixed in 10.0.14393.8246≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-48821 [HIGH] CWE-416 CVE-2025-48821: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.
nvd
← Previous143 / 227Next →
Microsoft Windows Server 2016 vulnerabilities | cvebase