Login Request a demo
WS
Product
Windows Server 2016 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
6,411
CVEs
157
On KEV
10.0
Max CVSS
759
New 30D
Vulnerabilities6,411In the news12Timeline
Severity mix
Critical 213High 263Medium 24Low 0
Severity
All severities500Critical213High263Medium24Low0
Exploitation
On CISA KEV157Exploited in the wild157
Watch

Add Windows Server 2016 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42990
9.8
1%
Jul 14
SQL Server ODBC driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9339
CVE-2026-44815
9.8
1%
Jun 9
DHCP Client Service Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9234
CVE-2026-47291
9.8
25%
Jun 9
HTTP.sys Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9234
CVE-2026-41089
9.8
80%
May 12
Windows Netlogon Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9140
CVE-2025-60724
9.8
6%
Nov 11
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network
Affected: before 10.0.14393.8594
CVE-2025-55234
9.8
21%
Sep 9
SMB Server might be susceptible to relay attacks depending on the configuration
Affected: before 10.0.14393.8422
CVE-2025-53766
9.8
8%
Aug 12
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network
Affected: before 10.0.14393.8330
CVE-2025-47981
9.8
41%
Jul 8
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network
Affected: before 10.0.14393.8246
CVE-2025-21307
9.8
2%
Jan 14
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Affected: before 10.0.14393.7699
CVE-2025-21298
9.8
74%
Jan 14
Windows OLE Remote Code Execution Vulnerability
Affected: before 10.0.14393.7699
CVE-2024-49112
9.8
72%
Dec 12
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.14393.7606
CVE-2024-43639
9.8
9%
Nov 12
Windows KDC Proxy Remote Code Execution Vulnerability
Affected: before 10.0.14393.7515
CVE-2024-43455
9.8
2%
Sep 10
Windows Remote Desktop Licensing Service Spoofing Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7336
CVE-2024-38240
9.8
1%
Sep 10
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7336
CVE-2024-38199
9.8
2%
Aug 13
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: before 10.0.14393.7259
CVE-2024-38140
9.8
4%
Aug 13
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Affected: before 10.0.14393.7259
CVE-2024-38063
9.8
71%
Aug 13
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.14393.7259
CVE-2024-38077
9.8
84%
Jul 9
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Affected: before 10.0.14393.7159
CVE-2024-38076
9.8
2%
Jul 9
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Affected: before 10.0.14393.7159
CVE-2024-38074
9.8
2%
Jul 9
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Affected: before 10.0.14393.7159
CVE-2024-30080
9.8
43%
Jun 11
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36397
9.8
18%
Nov 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36028
9.8
3%
Nov 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36434
9.8
2%
Oct 10
Windows IIS Server Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2023-35349
9.8
3%
Oct 10
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36911
9.8
2%
Aug 8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36910
9.8
3%
Aug 8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-36903
9.8
2%
Aug 8
Windows System Assessment Tool Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2023-35385
9.8
2%
Aug 8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-35367
9.8
2%
Jul 11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-35366
9.8
2%
Jul 11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-35365
9.8
2%
Jul 11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-33154
9.8
1%
Jul 11
Windows Partition Management Driver Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2023-32057
9.8
2%
Jul 11
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-32015
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.14393.5989
CVE-2023-32014
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.14393.5989
CVE-2023-29363
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.14393.5989
CVE-2022-35744
9.8
2%
May 31
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-24943
9.8
5%
May 9
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-24941
9.8
95%
May 9
Windows Network File System Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-28250
9.8
2%
Apr 11
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21554
9.8
95%
Apr 11
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-23415
9.8
3%
Mar 14
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21708
9.8
1%
Mar 14
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21692
9.8
21%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21690
9.8
28%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21689
9.8
27%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34722
9.8
3%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34721
9.8
76%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34718
9.8
55%
Sep 13
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
Page 3 of 5 · 213 total
12345
The 500 most important CVEs for this product (exploited first, then by severity)