Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
115
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 143 of 209
CVE-2020-17075HIGHCVSS 7.8v20h2v1903+3 more2020-11-11
CVE-2020-17075 [HIGH] CVE-2020-17075: Windows USO Core Worker Elevation of Privilege Vulnerability Windows USO Core Worker Elevation of Privilege Vulnerability
nvd
CVE-2020-17046MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17046 [MEDIUM] CVE-2020-17046: Windows Error Reporting Denial of Service Vulnerability Windows Error Reporting Denial of Service Vulnerability
nvd
CVE-2020-17069MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17069 [MEDIUM] Windows NDIS Information Disclosure Vulnerability Windows NDIS Information Disclosure Vulnerability Windows NDIS Information Disclosure Vulnerability
cvelistv5
CVE-2020-17000MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17000 [MEDIUM] CVE-2020-17000: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2020-16997MEDIUMCVSS 6.5v20h2v1903+3 more2020-11-11
CVE-2020-16997 [MEDIUM] CVE-2020-16997: Remote Desktop Protocol Server Information Disclosure Vulnerability Remote Desktop Protocol Server Information Disclosure Vulnerability
nvd
CVE-2020-17029MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2020-17004MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17004 [MEDIUM] CVE-2020-17004: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-17030MEDIUMCVSS 5.5v20h2v1903+2 more2020-11-11
CVE-2020-17030 [MEDIUM] CVE-2020-17030: Windows MSCTF Server Information Disclosure Vulnerability Windows MSCTF Server Information Disclosure Vulnerability
nvd
CVE-2020-17056MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17056 [MEDIUM] CVE-2020-17056: Windows Network File System Information Disclosure Vulnerability Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2020-1599MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-1599 [MEDIUM] Windows Spoofing Vulnerability Windows Spoofing Vulnerability Windows Spoofing Vulnerability
cvelistv5
CVE-2020-17045MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17045 [MEDIUM] CVE-2020-17045: Windows KernelStream Information Disclosure Vulnerability Windows KernelStream Information Disclosure Vulnerability
nvd
CVE-2020-17036MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17036 [MEDIUM] CVE-2020-17036: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
nvd
CVE-2020-17071MEDIUMCVSS 5.5v20h2v1903+2 more2020-11-11
CVE-2020-17071 [MEDIUM] CVE-2020-17071: Windows Delivery Optimization Information Disclosure Vulnerability Windows Delivery Optimization Information Disclosure Vulnerability
nvd
CVE-2020-16885HIGHCVSS 7.8v1903v2004+1 more2020-10-16
CVE-2020-16885 [HIGH] CVE-2020-16885: <p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly han An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application
nvd
CVE-2020-16900HIGHCVSS 7.8v1903v1909+2 more2020-10-16
CVE-2020-16900 [HIGH] CVE-2020-16900: <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles o An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16898HIGHCVSS 8.8v1903v1909+1 more2020-10-16
CVE-2020-16898 [HIGH] CVE-2020-16898: <p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICM A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Adverti
nvd
CVE-2020-16890HIGHCVSS 7.8v1903v1909+1 more2020-10-16
CVE-2020-16890 [HIGH] CVE-2020-16890: <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle o An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability,
nvd
CVE-2020-16975HIGHCVSS 7.8v1903v1909+2 more2020-10-16
CVE-2020-16975 [HIGH] CVE-2020-16975: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16912HIGHCVSS 7.8v1903v1909+2 more2020-10-16
CVE-2020-16912 [HIGH] CVE-2020-16912: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16896HIGHCVSS 7.5v1903v1909+2 more2020-10-16
CVE-2020-16896 [HIGH] CVE-2020-16896: <p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would need to run a
nvd