WS
Product
Windows Server 2016 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
6,411
CVEs
157
On KEV
10.0
Max CVSS
759
New 30D
Severity mix
Critical 213High 263Medium 24Low 0
Watch

Add Windows Server 2016 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41049
In wildKEV
5.4
3%
Nov 9
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5501
CVE-2021-31199
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: 10.0.0 before 10.0.14393.4467
CVE-2021-31201
In wildKEV
5.2
3%
Jun 8
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected: 10.0.0 before 10.0.14393.4467
CVE-2025-47827
In wildKEV
4.6
5%
Jun 5
IGEL OS Use of a Key Past its Expiration Date Vulnerability
Affected: before 10.0.14393.8519
CVE-2025-24984
In wildKEV
4.6
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7876
CVE-2023-24880
RansomwareIn wildKEV
4.4
78%
Mar 14
Windows SmartScreen Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5786
CVE-2026-32202
In wildKEV
4.3
71%
Apr 14
Windows Shell Spoofing Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9339
Page 4 of 4 · 157 total
1…34
The 500 most important CVEs for this product (exploited first, then by severity)