WS
Product
Windows Server 2016 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
6,411
CVEs
157
On KEV
10.0
Max CVSS
759
New 30D
Severity mix
Critical 213High 263Medium 24Low 0
Watch

Add Windows Server 2016 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-96951
In wildKEV
8.8
10%
Oct 13
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9612
CVE-2026-21510
In wildKEV
8.8
61%
Feb 10
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8868
CVE-2026-21513
In wildKEV
8.8
16%
Feb 10
MSHTML Framework Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8868
CVE-2025-33073
In wildKEV
8.8
83%
Jun 10
Windows SMB Client Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8148
CVE-2025-33053
In wildKEV
8.8
87%
Jun 10
Internet Shortcut Files Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8148
CVE-2024-49039
RansomwareIn wildKEV
8.8
14%
Nov 12
Windows Task Scheduler Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7515
CVE-2024-43461
In wildKEV
8.8
54%
Sep 10
Windows MSHTML Platform Spoofing Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7336
CVE-2024-30040
In wildKEV
8.8
4%
May 14
Windows MSHTML Platform Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6981
CVE-2023-36025
In wildKEV
8.8
88%
Nov 14
Windows SmartScreen Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6452
CVE-2023-32049
In wildKEV
8.8
4%
Jul 11
Windows SmartScreen Security Feature Bypass Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6085
CVE-2023-21674
In wildKEV
8.8
34%
Jan 10
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5648
CVE-2022-41128
In wildKEV
8.8
25%
Nov 9
Windows Scripting Languages Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5501
CVE-2022-26923
In wildKEV
8.8
84%
May 10
Active Directory Domain Services Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5850
CVE-2021-40444
RansomwareIn wildKEV
8.8
98%
Sep 15
Microsoft MSHTML Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.4651
CVE-2021-34527
RansomwareIn wildKEV
8.8
100%
Jul 2
Windows Print Spooler Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.4470
CVE-2020-1020
In wildKEV
8.8
65%
Apr 15
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2019-0903
In wildKEV
8.8
22%
May 16
Microsoft GDI Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2018-0824
In wildKEV
8.8
73%
May 9
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
Affected: 1709; 1803; 0
CVE-2017-8464
In wildKEV
8.8
90%
Jun 15
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2016-7256
In wildKEV
8.8
65%
Nov 10
Microsoft Windows Open Type Font Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-29360
In wildKEV
8.4
22%
Jun 13
Microsoft Streaming Service Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5989
CVE-2024-43573
In wildKEV
8.1
46%
Oct 8
Windows MSHTML Platform Spoofing Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7428
CVE-2020-0601
In wildKEV
8.1
89%
Jan 14
Microsoft Windows CryptoAPI Spoofing Vulnerability
Affected: All versions, or not specified
CVE-2026-85880
In wildKEV
7.8
0%
Sep 8
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9512
CVE-2026-56155
In wildKEV
7.8
0%
Jul 14
Active Directory Federation Services Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.9339
CVE-2026-21533
In wildKEV
7.8
4%
Feb 10
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8868
CVE-2026-21519
In wildKEV
7.8
2%
Feb 10
Desktop Window Manager Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8868
CVE-2025-59230
In wildKEV
7.8
3%
Oct 14
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8519
CVE-2025-24990
In wildKEV
7.8
6%
Oct 14
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8519
CVE-2025-32709
In wildKEV
7.8
2%
May 13
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8066
CVE-2025-32706
In wildKEV
7.8
2%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8066
CVE-2025-32701
In wildKEV
7.8
1%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.8066
CVE-2025-29824
RansomwareIn wildKEV
7.8
19%
Apr 8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7969
CVE-2025-24993
In wildKEV
7.8
2%
Mar 11
Windows NTFS Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7876
CVE-2025-24985
In wildKEV
7.8
4%
Mar 11
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7876
CVE-2025-21418
In wildKEV
7.8
2%
Feb 11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7785
CVE-2024-49138
In wildKEV
7.8
26%
Dec 10
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7606
CVE-2024-43572
In wildKEV
7.8
67%
Oct 8
Microsoft Management Console Remote Code Execution Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7428
CVE-2024-38014
In wildKEV
7.8
6%
Sep 10
Windows Installer Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7336
CVE-2024-38107
In wildKEV
7.8
2%
Aug 13
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7259
CVE-2024-38193
In wildKEV
7.8
29%
Aug 13
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7259
CVE-2024-35250
In wildKEV
7.8
25%
Jun 11
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.7070
CVE-2024-30051
RansomwareIn wildKEV
7.8
6%
May 14
Windows DWM Core Library Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6981
CVE-2024-26169
RansomwareIn wildKEV
7.8
4%
Mar 12
Windows Error Reporting Service Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6796
CVE-2023-36036
In wildKEV
7.8
17%
Nov 14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6452
CVE-2023-36424
In wildKEV
7.8
12%
Nov 14
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6452
CVE-2023-36874
In wildKEV
7.8
43%
Jul 11
Windows Error Reporting Service Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6085
CVE-2023-32046
In wildKEV
7.8
10%
Jul 11
Windows MSHTML Platform Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.6085
CVE-2023-29336
In wildKEV
7.8
41%
May 9
Win32k Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5921
CVE-2023-28252
RansomwareIn wildKEV
7.8
49%
Apr 11
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.14393.0 before 10.0.14393.5850
Page 1 of 6 · 263 total
12…6
The 500 most important CVEs for this product (exploited first, then by severity)