Microsoft Windows Server 2016 vulnerabilities
6,033 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
6,033
CISA KEV
121
actively exploited
Public exploits
174
Exploited in wild
181
Severity breakdown
CRITICAL215HIGH4237MEDIUM1559LOW22
Vulnerabilities
Page 30 of 302
CVE-2018-8468P3MEDIUMCVSS 4.7PoCv1709v1803+1 more2018-09-13
CVE-2018-8468 [MEDIUM] CVE-2018-8468: An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
nvd
CVE-2019-0842P3HIGHCVSS 8.8v1709v18032019-04-09
CVE-2019-0842 [HIGH] CWE-787 CVE-2019-0842: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
nvd
CVE-2023-21708P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-21708 [CRITICAL] CWE-191 CVE-2023-21708: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2026-83578P2CRITICALCVSS 9.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83578 [CRITICAL] CWE-122 CVE-2026-83578: Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97805P3CRITICALCVSS 9.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-97805 [CRITICAL] CWE-20 CVE-2026-97805: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72983P3CRITICALCVSS 9.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72983 [CRITICAL] CWE-416 CVE-2026-72983: Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execu
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2019-0662P3HIGHCVSS 8.8v1709v18032019-03-05
CVE-2019-0662 [HIGH] CVE-2019-0662: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618.
nvd
CVE-2018-0822P3HIGHCVSS 7.0PoCv17092018-02-15
CVE-2018-0822 [HIGH] CVE-2018-0822: NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version
NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability".
nvd
CVE-2022-29129P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29129 [HIGH] CVE-2022-29129: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-29128P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29128 [HIGH] CVE-2022-29128: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-29141P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29141 [HIGH] CVE-2022-29141: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2018-0821P3HIGHCVSS 7.0PoCv17092018-02-15
CVE-2018-0821 [HIGH] CWE-269 CVE-2018-0821: AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server,
AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".
nvd
CVE-2025-26647P3HIGHCVSS 8.8fixed in 10.0.14393.7969≥ 10.0.14393.0, < 10.0.14393.79692025-04-08
CVE-2025-26647 [HIGH] CWE-20 CVE-2025-26647: Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges ov
Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2020-1248P3HIGHCVSS 8.8v1903v1909+1 more2020-06-09
CVE-2020-1248 [HIGH] CVE-2020-1248: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
nvd
CVE-2020-1435P3HIGHCVSS 8.8v1903v1909+1 more2020-07-14
CVE-2020-1435 [HIGH] CVE-2020-1435: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
nvd
CVE-2025-53722P3HIGHCVSS 7.5fixed in 10.0.14393.8330≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-53722 [HIGH] CWE-400 CVE-2025-53722: Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker
Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-42985P3HIGHCVSS 8.8fixed in 10.0.14393.9234≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-42985 [HIGH] CWE-416 CVE-2026-42985: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32225P3HIGHCVSS 8.8fixed in 10.0.14393.9060≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-32225 [HIGH] CWE-693 CVE-2026-32225: Improper neutralization of special elements used in a command ('command injection') in Windows Shell
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-71336P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-71336 [HIGH] CWE-190 CVE-2026-71336: Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execu
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
nvd
CVE-2019-0721P3CRITICALCVSS 9.1v1803v19032019-11-12
CVE-2019-0721 [CRITICAL] CVE-2019-0721: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719.
nvd