Microsoft Windows Server 2016 vulnerabilities
4,536 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22
Vulnerabilities
Page 200 of 227
CVE-2020-1075P4MEDIUMCVSS 5.5v1709v1803+1 more2020-05-21
CVE-2020-1075 [MEDIUM] CVE-2020-1075: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles o
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.
nvd
CVE-2019-1274P4MEDIUMCVSS 5.5v1803v19032019-09-11
CVE-2019-1274 [MEDIUM] CWE-665 CVE-2019-1274: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
nvd
CVE-2019-1282P4MEDIUMCVSS 5.5v1803v19032019-09-11
CVE-2019-1282 [MEDIUM] CVE-2019-1282: An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails t
An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.
nvd
CVE-2019-1254P4MEDIUMCVSS 5.5v1803v19032019-09-11
CVE-2019-1254 [MEDIUM] CWE-908 CVE-2019-1254: An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to d
An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
nvd
CVE-2020-0775P4MEDIUMCVSS 5.5v1709v1803+1 more2020-03-12
CVE-2020-0775 [MEDIUM] CVE-2020-0775: An information disclosure vulnerability exists when Windows Error Reporting improperly handles file
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
nvd
CVE-2020-0859P4MEDIUMCVSS 5.5v1803v1903+1 more2020-03-12
CVE-2020-0859 [MEDIUM] CVE-2020-0859: An information vulnerability exists when Windows Modules Installer Service improperly discloses file
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
nvd
CVE-2020-0643P4MEDIUMCVSS 5.5v1803v19092020-01-14
CVE-2020-0643 [MEDIUM] CVE-2020-0643: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI+ Information Disclosure Vulnerability'.
nvd
CVE-2020-17000P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17000 [MEDIUM] CVE-2020-17000: Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2020-1361P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1361 [MEDIUM] CVE-2020-1361: An information disclosure vulnerability exists in the way that the WalletService handles memory.To e
An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.
nvd
CVE-2021-1672P4MEDIUMCVSS 5.5v20h2v1909+1 more2021-01-12
CVE-2021-1672 [MEDIUM] CVE-2021-1672: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
nvd
CVE-2020-1358P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1358 [MEDIUM] CVE-2020-1358: An information disclosure vulnerability exists when the Windows Resource Policy component improperly
An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Resource Policy Information Disclosure Vulnerability'.
nvd
CVE-2020-1420P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1420 [MEDIUM] CVE-2020-1420: An information disclosure vulnerability exists when Windows Error Reporting improperly handles file
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
nvd
CVE-2020-1330P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1330 [MEDIUM] CVE-2020-1330: An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnosti
An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.
nvd
CVE-2020-1386P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1386 [MEDIUM] CVE-2020-1386: An information vulnerability exists when Windows Connected User Experiences and Telemetry Service im
An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.
nvd
CVE-2020-1116P4MEDIUMCVSS 5.5v1803v1903+1 more2020-05-21
CVE-2020-1116 [MEDIUM] CVE-2020-1116: An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CS
An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerability'.
nvd
CVE-2021-1670P4MEDIUMCVSS 5.5v20h2v20042021-01-12
CVE-2021-1670 [MEDIUM] CVE-2021-1670: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
nvd
CVE-2021-1663P4MEDIUMCVSS 5.5v20h2v20042021-01-12
CVE-2021-1663 [MEDIUM] CVE-2021-1663: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
nvd
CVE-2018-8549P4MEDIUMCVSS 5.5v1709v18032018-11-14
CVE-2018-8549 [MEDIUM] CVE-2018-8549: A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "W
A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
nvd
CVE-2023-28271P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28271 [MEDIUM] CWE-200 CVE-2023-28271: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2020-0928P4MEDIUMCVSS 5.5v1903v1909+1 more2020-09-11
CVE-2020-0928 [MEDIUM] CVE-2020-0928: <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. T
nvd