Windows Server 2016

22 results · Clear filters · Feed

• Medium 4.3
  CVE-2026-32202 Exploited Public exploit EPSS 71%

  Windows Shell Spoofing Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine
  Apr 14, 2026

  KEV Apr 28, 2026
• Medium 6.2
  CVE-2026-21525 Exploited

  Windows Remote Access Connection Manager Denial of Service Vulnerability

  Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• Medium 5.5
  CVE-2026-20805 Exploited Public exploit

  Desktop Window Manager Information Disclosure Vulnerability

  Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 13, 2026

  KEV Jan 13, 2026
• Medium 5.5
  CVE-2025-24991 Exploited

  Windows NTFS Information Disclosure Vulnerability

  Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• Medium 4.6
  CVE-2025-24984 Exploited

  Windows NTFS Information Disclosure Vulnerability

  Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• Medium 6.5
  CVE-2025-24054 Exploited Public exploit EPSS 62%

  NTLM Hash Disclosure Spoofing Vulnerability

  External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Apr 17, 2025
• Medium 6.5
  CVE-2024-43451 Exploited Public exploit EPSS 84%

  NTLM Hash Disclosure Spoofing Vulnerability

  NTLM Hash Disclosure Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 12, 2024

  KEV Nov 12, 2024
• Medium 6.5
  CVE-2024-43573 Exploited EPSS 46%

  Windows MSHTML Platform Spoofing Vulnerability

  Windows MSHTML Platform Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 8, 2024

  KEV Oct 8, 2024
• Medium 5.4
  CVE-2024-38217 Exploited EPSS 10%

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 10, 2024

  KEV Sep 10, 2024
• Medium 6.5
  CVE-2024-38213 Exploited EPSS 14%

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 13, 2024

  KEV Aug 13, 2024
• Medium 6.5
  CVE-2023-36563 Exploited EPSS 20%

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Oct 10, 2023
• Medium 5.4
  CVE-2023-36584 Exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Nov 16, 2023
• Medium 4.4
  CVE-2023-24880 Exploited · Ransomware EPSS 78%

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 14, 2023

  KEV Mar 14, 2023
• Medium 5.4
  CVE-2022-44698 Exploited · Ransomware EPSS 75%

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows
  Dec 13, 2022

  KEV Dec 13, 2022
• Medium 5.4
  CVE-2022-41049 Exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 14, 2022
• Medium 5.4
  CVE-2022-41091 Exploited · Ransomware

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 8, 2022
• Medium 5.5
  CVE-2021-41379 Exploited · Ransomware EPSS 19%

  Windows Installer Elevation of Privilege Vulnerability

  Windows Installer Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 10, 2021

  KEV Mar 3, 2022
• Medium 6.8
  CVE-2021-34448 Exploited EPSS 40%

  Scripting Engine Memory Corruption Vulnerability

  Scripting Engine Memory Corruption Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jul 16, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31199 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31201 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2013-3900 Exploited Public exploit EPSS 45%

  WinVerifyTrust Signature Validation Vulnerability

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 11, 2013

  KEV Jan 10, 2022