cbcvebase.

Microsoft Windows Server 2016 vulnerabilities

4,536 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22

Vulnerabilities

Page 205 of 227
CVE-2022-23281P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.50062022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5v1903v1909+2 more2020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5fixed in 10.0.14393.6252≥ 10.0.14393.0, < 10.0.14393.62522023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2022-22711P4MEDIUMCVSS 5.7v20h2≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-22711 [MEDIUM] CVE-2022-22711: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2023-21525P4MEDIUMCVSS 5.3≥ 10.0.14393.0, < 10.0.14393.56482023-01-10
CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2020-0779P4MEDIUMCVSS 5.5v1803v1903+1 more2020-03-12
CVE-2020-0779 [MEDIUM] CWE-59 CVE-2020-0779: An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process sy An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.
nvd
CVE-2019-1270P4MEDIUMCVSS 5.5v1803v19032019-09-11
CVE-2019-1270 [MEDIUM] CWE-59 CVE-2019-1270: An elevation of privilege vulnerability exists in Windows store installer where WindowsApps director An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'.
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6fixed in 10.0.14393.7699≥ 10.0.14393.0, < 10.0.14393.76992025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2022-21998P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.49462022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2021-34509P4MEDIUMCVSS 5.5v20h2v2004+1 more2021-07-14
CVE-2021-34509 [MEDIUM] CVE-2021-34509: Storage Spaces Controller Information Disclosure Vulnerability Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2024-30016P4MEDIUMCVSS 5.5fixed in 10.0.14393.6981≥ 10.0.14393.0, < 10.0.14393.69812024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38056P4MEDIUMCVSS 5.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38056 [MEDIUM] CWE-125 CVE-2024-38056: Microsoft Windows Codecs Library Information Disclosure Vulnerability Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-21985P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.49462022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-26930P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-26930 [MEDIUM] CVE-2022-26930: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-35831P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-35831 [MEDIUM] CWE-125 CVE-2022-35831: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-43235P4MEDIUMCVSS 5.5v2004≥ 10.0.0, < 10.0.14393.48252021-12-15
CVE-2021-43235 [MEDIUM] CVE-2021-43235: Storage Spaces Controller Information Disclosure Vulnerability Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2021-43227P4MEDIUMCVSS 5.5v2004≥ 10.0.0, < 10.0.14393.48252021-12-15
CVE-2021-43227 [MEDIUM] CVE-2021-43227: Storage Spaces Controller Information Disclosure Vulnerability Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2022-24493P4MEDIUMCVSS 5.5v20h2≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-24493 [MEDIUM] CVE-2022-24493: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2021-34457P4MEDIUMCVSS 5.5v20h2v2004+1 more2021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
← Previous205 / 227Next →
Microsoft Windows Server 2016 vulnerabilities | cvebase