Microsoft Windows Server 2016 vulnerabilities
4,536 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22
Vulnerabilities
Page 203 of 227
CVE-2025-21352P4MEDIUMCVSS 6.5fixed in 10.0.14393.7785≥ 10.0.14393.0, < 10.0.14393.77852025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21212P4MEDIUMCVSS 6.5fixed in 10.0.14393.7785≥ 10.0.14393.0, < 10.0.14393.77852025-02-11
CVE-2025-21212 [MEDIUM] CWE-125 CVE-2025-21212: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21216P4MEDIUMCVSS 6.5fixed in 10.0.14393.7785≥ 10.0.14393.0, < 10.0.14393.77852025-02-11
CVE-2025-21216 [MEDIUM] CWE-125 CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2024-38048P4MEDIUMCVSS 6.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38048 [MEDIUM] CWE-125 CVE-2024-38048: Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
nvd
CVE-2024-38105P4MEDIUMCVSS 6.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38105 [MEDIUM] CWE-20 CVE-2024-38105: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38101P4MEDIUMCVSS 6.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38101 [MEDIUM] CWE-125 CVE-2024-38101: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38102P4MEDIUMCVSS 6.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38102 [MEDIUM] CWE-125 CVE-2024-38102: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2020-0751P4MEDIUMCVSS 6.0v1903v19092020-02-11
CVE-2020-0751 [MEDIUM] CVE-2020-0751: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The secur
nvd
CVE-2022-22010P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.50062022-03-09
CVE-2022-22010 [MEDIUM] CVE-2022-22010: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2022-24483P4MEDIUMCVSS 5.5v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-24483 [MEDIUM] CVE-2022-24483: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2019-1091P4MEDIUMCVSS 5.5v1803v19032019-07-15
CVE-2019-1091 [MEDIUM] CWE-200 CVE-2019-1091: An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
nvd
CVE-2021-31184P4MEDIUMCVSS 5.5v20h2v1909+2 more2021-05-11
CVE-2021-31184 [MEDIUM] CVE-2021-31184: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
nvd
CVE-2020-0962P4MEDIUMCVSS 5.5v1803v1903+1 more2020-04-15
CVE-2020-0962 [MEDIUM] CVE-2020-0962: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0699.
nvd
CVE-2020-0699P4MEDIUMCVSS 5.5v1803v1903+1 more2020-04-15
CVE-2020-0699 [MEDIUM] CVE-2020-0699: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0962.
nvd
CVE-2020-0821P4MEDIUMCVSS 5.5v1803v1903+1 more2020-04-15
CVE-2020-0821 [MEDIUM] CVE-2020-0821: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1007.
nvd
CVE-2020-0698P4MEDIUMCVSS 5.5v1803v1903+1 more2020-02-11
CVE-2020-0698 [MEDIUM] CVE-2020-0698: An information disclosure vulnerability exists when the Telephony Service improperly discloses the c
An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'.
nvd
CVE-2020-0717P4MEDIUMCVSS 5.5v1803v1903+1 more2020-02-11
CVE-2020-0717 [MEDIUM] CVE-2020-0717: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0716.
nvd
CVE-2020-0874P4MEDIUMCVSS 5.5v19092020-03-12
CVE-2020-0874 [MEDIUM] CVE-2020-0874: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.
nvd
CVE-2020-17029P4MEDIUMCVSS 5.5v20h2v1903+3 more2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability
Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2020-1351P4MEDIUMCVSS 5.5v1903v1909+1 more2020-07-14
CVE-2020-1351 [MEDIUM] CVE-2020-1351: An information disclosure vulnerability exists when the Windows Graphics component improperly handle
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
nvd