Microsoft Windows Server 2016 vulnerabilities

4,167 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
4,167
CISA KEV
114
actively exploited
Public exploits
129
Exploited in wild
107
Severity breakdown
CRITICAL114HIGH2916MEDIUM1118LOW19

Vulnerabilities

Page 95 of 209
CVE-2022-33645HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-33645 [HIGH] CVE-2022-33645: Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Driver Denial of Service Vulnerability
nvd
CVE-2022-38029HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38029 [HIGH] Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-30198HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-30198 [HIGH] CWE-362 CVE-2022-30198: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-38000HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38000 [HIGH] CWE-362 CVE-2022-38000: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37981MEDIUMCVSS 4.3≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37981 [MEDIUM] CVE-2022-37981: Windows Event Logging Service Denial of Service Vulnerability Windows Event Logging Service Denial of Service Vulnerability
nvd
CVE-2022-38032MEDIUMCVSS 6.6≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38032 [MEDIUM] CVE-2022-38032: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
nvd
CVE-2022-37977MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37977 [MEDIUM] CVE-2022-37977: Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
nvd
CVE-2022-38033MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38033 [MEDIUM] CVE-2022-38033: Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
nvd
CVE-2022-38043MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38043 [MEDIUM] CVE-2022-38043: Windows Security Support Provider Interface Information Disclosure Vulnerability Windows Security Support Provider Interface Information Disclosure Vulnerability
nvd
CVE-2022-35770MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-35770 [MEDIUM] Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability
cvelistv5
CVE-2022-37965MEDIUMCVSS 5.9≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37965 [MEDIUM] CVE-2022-37965: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2022-37985MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37985 [MEDIUM] CVE-2022-37985: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-37996MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37996 [MEDIUM] CVE-2022-37996: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2022-38026MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38026 [MEDIUM] CVE-2022-38026: Windows DHCP Client Information Disclosure Vulnerability Windows DHCP Client Information Disclosure Vulnerability
nvd
CVE-2022-38022LOWCVSS 3.3≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38022 [LOW] CVE-2022-38022: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-34722CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-34722 [CRITICAL] CVE-2022-34722: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2022-34721CRITICALCVSS 9.8Exploited≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-34721 [CRITICAL] CVE-2022-34721: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2022-34718CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-34718 [CRITICAL] CVE-2022-34718: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2022-35803HIGHCVSS 7.8Exploited≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-35803 [HIGH] CVE-2022-35803: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-37956HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-37956 [HIGH] CVE-2022-37956: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd