WS
Product
Windows Server 2016 (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
6,411
CVEs
157
On KEV
10.0
Max CVSS
759
New 30D
Severity mix
Critical 216High 260Medium 24Low 0
Watch
Add Windows Server 2016 (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21690 | 9.8 | Feb 14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21689 | 9.8 | Feb 14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34722 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34721 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34718 | 9.8 | Sep 13 | Windows TCP/IP Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: 10.0.14393.0 before 10.0.14393.5291 |
| CVE-2022-30136 | 9.8 | Jun 15 | Windows Network File System Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26937 | 9.8 | May 10 | Windows Network File System Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-24497 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-24491 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-21874 | 9.8 | Jan 11 | Windows Security Center API Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21849 | 9.8 | Jan 11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: 2004 |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: 2004 |
| CVE-2021-26432 | 9.8 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Affected: 20h2; 2004 |
| CVE-2021-26897 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-26895 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-26894 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-26893 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-26877 | 9.8 | Mar 11 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-24078 | 9.8 | Feb 25 | Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 1909; 2004 |
| CVE-2020-17051 | 9.8 | Nov 11 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2; 1903; 1909; 2004 |
| CVE-2020-0690 | 9.8 | Mar 12 | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability' Affected: 1803; 1903; 1909 |
| CVE-2020-0610 | 9.8 | Jan 14 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends… Affected: All versions, or not specified |
| CVE-2020-0609 | 9.8 | Jan 14 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends… Affected: All versions, or not specified |
| CVE-2019-1226 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1903 |
| CVE-2019-1222 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1903 |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: 1803; 1903 |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1903 |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1903 |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: 1803 |
| CVE-2019-0785 | 9.8 | Jul 15 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server… Affected: 1803; 1903 |
| CVE-2019-0725 | 9.8 | May 16 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution… Affected: 1803; 1903 |
| CVE-2019-0786 | 9.8 | Apr 9 | An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file… Affected: 1709; 1803 |
| CVE-2019-0726 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803 |
| CVE-2019-0698 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803 |
| CVE-2019-0697 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803 |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: 1709; 1803 |
| CVE-2018-8626 | 9.8 | Dec 12 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow… Affected: 1709; 1803 |
| CVE-2018-8476 | 9.8 | Nov 14 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote… Affected: 1803 |
| CVE-2017-11899 | 9.8 | Dec 12 | Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted… Affected: 1709 |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: All versions, or not specified |
| CVE-2017-8686 | 9.8 | Sep 13 | The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause… Affected: All versions, or not specified |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)