What’s Vulnerable › Products

Microsoft Windows Server 2016 vulnerabilities

6411 known vulnerabilities, 157 confirmed exploited in the wild (CISA KEV), 2079 published in the last 12 months.

Check whether your Microsoft Windows Server 2016 version is affected

Exploited Microsoft Windows Server 2016 vulnerabilities

• CVE-2026-96951 — Windows Shell Security Feature Bypass Vulnerability
• CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
• CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
• CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability
• CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability
• CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability
• CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion Vulnerability
• CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Latest Microsoft Windows Server 2016 vulnerabilities

• CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97843 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97842 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97841 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97840 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97839 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97838 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97837 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97836 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97835 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97834 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97833 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97832 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97831 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97829 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97828 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97827 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97826 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97825 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97824 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97823 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97822 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97821 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97820 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97819 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)