WS
Product
Windows Server 2016 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
6,411
CVEs
157
On KEV
10.0
Max CVSS
759
New 30D
Severity mix
Critical 213High 263Medium 24Low 0
Watch

Add Windows Server 2016 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1350
In wildKEV
10.0
97%
Jul 14
Microsoft Windows DNS Server Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-33824
In wildKEV
9.8
77%
Apr 14
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9060
CVE-2025-59287
In wildKEV
9.8
100%
Oct 14
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8524
CVE-2017-8543
In wildKEV
9.8
74%
Jun 15
Microsoft Windows Search Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2020-1040
In wildKEV
9.0
7%
Jul 14
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
Affected: All versions, or not specified
Showing 5
The 500 most important CVEs for this product (exploited first, then by severity)