Microsoft Windows Server 2016 vulnerabilities
6,378 published vulnerabilities in Microsoft Windows Server 2016, 157 of them exploited in the wild. The most were published in 2026 (2003), and 2003 so far in 2026.
Microsoft Windows Server 2016 vulnerabilities by year
2013
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Microsoft Windows Server 2016 vulnerabilities
- CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data
- CVE-2017-8543 Microsoft Windows Search Remote Code Execution
- CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution
- CVE-2026-96951 Microsoft Windows Command Injection
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.