microsoft / windows_server_2016
1,310 known vulnerabilities in microsoft windows_server_2016.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-21265 | Low | 1.1% | 6.4 | Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These … | |
| CVE-2021-36961 | Low | 1.1% | 5.5 | Windows Installer Denial of Service Vulnerability | |
| CVE-2022-41090 | Low | 1.0% | 5.9 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability | |
| CVE-2026-59138 | Low | 1.0% | 6.5 | Null pointer dereference in Microsoft Remote Registry Service allows an authoriz… | |
| CVE-2026-61345 | Low | 1.0% | 6.5 | Null pointer dereference in Microsoft Remote Registry Service allows an authoriz… | |
| CVE-2020-1071 | Low | 1.0% | 6.8 | An elevation of privilege vulnerability exists when Windows improperly handles e… | |
| CVE-2026-57982 | Low | 1.0% | 6.5 | Use of uninitialized resource in Windows RDP allows an authorized attacker to di… | |
| CVE-2026-78523 | Low | 1.0% | 5.9 | Use after free in Windows DNS allows an unauthorized attacker to deny service ov… | |
| CVE-2021-33760 | Low | 1.0% | 5.5 | Media Foundation Information Disclosure Vulnerability | |
| CVE-2023-36908 | Low | 1.0% | 6.5 | Windows Hyper-V Information Disclosure Vulnerability | |
| CVE-2026-69723 | Low | 1.0% | 5.7 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2021-34491 | Low | 1.0% | 5.5 | Win32k Information Disclosure Vulnerability | |
| CVE-2021-24107 | Low | 1.0% | 5.5 | Windows Event Tracing Information Disclosure Vulnerability | |
| CVE-2021-26869 | Low | 1.0% | 5.5 | Windows ActiveX Installer Service Information Disclosure Vulnerability | |
| CVE-2021-26884 | Low | 1.0% | 5.5 | Windows Media Photo Codec Information Disclosure Vulnerability | |
| CVE-2026-50432 | Low | 1.0% | 5.3 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized … | |
| CVE-2021-42280 | Low | 0.9% | 5.5 | Windows Feedback Hub Elevation of Privilege Vulnerability | |
| CVE-2021-34509 | Low | 0.9% | 5.5 | Storage Spaces Controller Information Disclosure Vulnerability | |
| CVE-2024-38234 | Low | 0.9% | 6.5 | Windows Networking Denial of Service Vulnerability | |
| CVE-2026-20927 | Low | 0.9% | 5.3 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-50376 | Low | 0.9% | 6.5 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-50445 | Low | 0.9% | 6.5 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose info… | |
| CVE-2026-50497 | Low | 0.9% | 6.5 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attac… | |
| CVE-2026-50504 | Low | 0.9% | 6.5 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to dis… | |
| CVE-2026-54126 | Low | 0.9% | 6.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-55003 | Low | 0.9% | 6.5 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-57979 | Low | 0.9% | 6.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-58533 | Low | 0.9% | 6.5 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-58535 | Low | 0.9% | 6.5 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-58539 | Low | 0.9% | 6.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-58546 | Low | 0.9% | 6.5 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-78453 | Low | 0.9% | 6.5 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System Fi… | |
| CVE-2023-21722 | Low | 0.9% | 5.0 | .NET Framework Denial of Service Vulnerability | |
| CVE-2026-42903 | Low | 0.9% | 6.5 | Null pointer dereference in Windows Kerberos allows an authorized attacker to de… | |
| CVE-2026-69552 | Low | 0.9% | 5.7 | Generation of error message containing sensitive information in Windows Print Sp… | |
| CVE-2026-69572 | Low | 0.9% | 5.7 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclo… | |
| CVE-2021-33763 | Low | 0.9% | 5.5 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | |
| CVE-2021-34440 | Low | 0.9% | 5.5 | GDI+ Information Disclosure Vulnerability | |
| CVE-2021-34454 | Low | 0.9% | 5.5 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | |
| CVE-2021-34457 | Low | 0.9% | 5.5 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | |
| CVE-2021-36938 | Low | 0.9% | 5.5 | Windows Cryptographic Primitives Library Information Disclosure Vulnerability | |
| CVE-2021-36969 | Low | 0.9% | 5.5 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulne… | |
| CVE-2021-36972 | Low | 0.9% | 5.5 | Windows SMB Information Disclosure Vulnerability | |
| CVE-2021-38635 | Low | 0.9% | 5.5 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulne… | |
| CVE-2021-38636 | Low | 0.9% | 5.5 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulne… | |
| CVE-2021-38637 | Low | 0.9% | 5.5 | Windows Storage Information Disclosure Vulnerability | |
| CVE-2026-20824 | Low | 0.9% | 5.5 | Protection mechanism failure in Windows Remote Assistance allows an unauthorized… | |
| CVE-2026-61918 | Low | 0.9% | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to d… | |
| CVE-2026-62782 | Low | 0.9% | 6.5 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disc… | |
| CVE-2021-42277 | Low | 0.9% | 5.5 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |