CVE Tools
Track your stack

Windows Server 2016

7,022 CVEs tracked. 164 of them are in CISA KEV.

This hub aggregates every CVE we track for Windows Server 2016, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Windows Server 2016 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Windows Server 2016 CVEs per month
MonthCVEs
2024-1234
2025-01111
2025-0232
2025-0336
2025-0460
2025-0535
2025-0640
2025-0782
2025-0855
2025-0944
2025-1070
2025-1126
2025-1218
2026-0152
2026-0221
2026-0335
2026-0486
2026-0547
2026-0676
2026-07248
2026-08166
2026-09554
2026-10759
2026-11522

Severity

How the 7,022 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical2143%
  • High4,77168%
  • Medium2,00729%
  • Low300%

Latest CVEs

The 15 most recently published vulnerabilities affecting Windows Server 2016.

  1. CVE-2026-118148Active Directory Domain Services Elevation of Privilege Vulnerability7.5
  2. CVE-2026-119382Windows TPM Elevation of Privilege Vulnerability7.8
  3. CVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability5.9
  4. CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5
  5. CVE-2026-122183Windows Kernel Elevation of Privilege Vulnerability7.8
  6. CVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0
  7. CVE-2026-122182Windows Maps Elevation of Privilege Vulnerability7.0
  8. CVE-2026-122177Windows iSCSI Elevation of Privilege Vulnerability7.5
  9. CVE-2026-122176Windows SMB Remote Code Execution Vulnerability8.8
  10. CVE-2026-122174Windows Task Scheduler Elevation of Privilege Vulnerability7.0
  11. CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability6.8
  12. CVE-2026-122171Microsoft XPS Document Converter Remote Code Execution Vulnerability8.8
  13. CVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8
  14. CVE-2026-122169Windows IKE Extension Spoofing Vulnerability7.5
  15. CVE-2026-122170Windows Win32k Elevation of Privilege Vulnerability7.0

Product grouping is registry-driven, with AI assist and human review. How it works