Microsoft Windows Server 2016 vulnerabilities
4,536 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
4,536
CISA KEV
116
actively exploited
Public exploits
172
Exploited in wild
176
Severity breakdown
CRITICAL135HIGH3181MEDIUM1198LOW22
Vulnerabilities
Page 213 of 227
CVE-2019-0600P4MEDIUMCVSS 4.7v1709v18032019-03-05
CVE-2019-0600 [MEDIUM] CVE-2019-0600: An information disclosure vulnerability exists when the Human Interface Devices (HID) component impr
An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.
nvd
CVE-2018-8121P4MEDIUMCVSS 4.7v1709v1803+1 more2018-06-14
CVE-2018-8121 [MEDIUM] CWE-665 CVE-2018-8121: An information disclosure vulnerability exists when the Windows kernel improperly initializes object
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.
nvd
CVE-2025-59198P4MEDIUMCVSS 5.0fixed in 10.0.14393.8519≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59198 [MEDIUM] CWE-20 CVE-2025-59198: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to den
Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
nvd
CVE-2021-28316P4MEDIUMCVSS 4.6v20h2v1909+2 more2021-04-13
CVE-2021-28316 [MEDIUM] CVE-2021-28316: Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
nvd
CVE-2024-30071P4MEDIUMCVSS 4.7fixed in 10.0.14393.7159≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-30071 [MEDIUM] CWE-126 CVE-2024-30071: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2024-30069P4MEDIUMCVSS 4.7fixed in 10.0.14393.7070≥ 10.0.14393.0, < 10.0.14393.70702024-06-11
CVE-2024-30069 [MEDIUM] CWE-126 CVE-2024-30069: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2023-36722P4MEDIUMCVSS 4.4≥ 10.0.14393.0, < 10.0.14393.63512023-10-10
CVE-2023-36722 [MEDIUM] CWE-284 CVE-2023-36722: Active Directory Domain Services Information Disclosure Vulnerability
Active Directory Domain Services Information Disclosure Vulnerability
nvd
CVE-2022-24466P4MEDIUMCVSS 4.1≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-24466 [MEDIUM] CVE-2022-24466: Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2021-24098P4MEDIUMCVSS 5.5v20h2v1909+1 more2021-02-25
CVE-2021-24098 [MEDIUM] CVE-2021-24098: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2020-0794P4MEDIUMCVSS 5.5v1803v1903+1 more2020-04-15
CVE-2020-0794 [MEDIUM] CVE-2020-0794: A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Win
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
nvd
CVE-2020-1194P4MEDIUMCVSS 5.5v1803v1903+2 more2020-06-09
CVE-2020-1194 [MEDIUM] CVE-2020-1194: A denial of service vulnerability exists when Windows Registry improperly handles filesystem operati
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.
nvd
CVE-2022-22002P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.49462022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability
Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2025-21274P4MEDIUMCVSS 5.5fixed in 10.0.14393.7699≥ 10.0.14393.0, < 10.0.14393.76992025-01-14
CVE-2025-21274 [MEDIUM] CWE-59 CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2025-21284P4MEDIUMCVSS 5.5fixed in 10.0.14393.7699≥ 10.0.14393.0, < 10.0.14393.76992025-01-14
CVE-2025-21284 [MEDIUM] CWE-20 CVE-2025-21284: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2025-21280P4MEDIUMCVSS 5.5fixed in 10.0.14393.7699≥ 10.0.14393.0, < 10.0.14393.76992025-01-14
CVE-2025-21280 [MEDIUM] CWE-20 CVE-2025-21280: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2024-26220P4MEDIUMCVSS 5.0fixed in 10.0.14393.6897≥ 10.0.14393.0, < 10.0.14393.68972024-04-09
CVE-2024-26220 [MEDIUM] CWE-908 CVE-2024-26220: Windows Mobile Hotspot Information Disclosure Vulnerability
Windows Mobile Hotspot Information Disclosure Vulnerability
nvd
CVE-2019-0839P4MEDIUMCVSS 4.4v1709v18032019-04-09
CVE-2019-0839 [MEDIUM] CVE-2019-0839: An information disclosure vulnerability exists when the Terminal Services component improperly discl
An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.
nvd
CVE-2023-32019P4MEDIUMCVSS 4.7≥ 10.0.14393.0, < 10.0.14393.59892023-06-14
CVE-2023-32019 [MEDIUM] CWE-668 CVE-2023-32019: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2019-0775P4MEDIUMCVSS 4.7v1709v18032019-04-09
CVE-2019-0775 [MEDIUM] CVE-2019-0775: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0782.
nvd
CVE-2018-8566P4MEDIUMCVSS 4.6v1709v1803+1 more2018-11-14
CVE-2018-8566 [MEDIUM] CVE-2018-8566: A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Enc
A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
nvd