cve.bz

microsoft windows server 2016 vulnerabilities, newest first, page 49

Filter
  1. 7.5CVE-2025-27486EPSS 2.2%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  2. 7.5CVE-2025-27485EPSS 2.2%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  3. 7.5CVE-2025-27484EPSS 0.8%

    Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

  4. 7.8CVE-2025-27483EPSS 0.8%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

  5. 8.1CVE-2025-27482EPSS 1.6%

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2025-27481EPSS 1.3%

    Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  7. 8.1CVE-2025-27480EPSS 13%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  8. 7.5CVE-2025-27479EPSS 2.3%

    Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

  9. 7.0CVE-2025-27478EPSS 0.5%

    Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

  10. 8.8CVE-2025-27477EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  11. 6.5CVE-2025-27474EPSS 1.9%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  12. 7.5CVE-2025-27473EPSS 2.3%

    Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

  13. 5.9CVE-2025-27471EPSS 1.3%

    Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

  14. 7.5CVE-2025-27470EPSS 2.4%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  15. 7.5CVE-2025-27469EPSS 2.6%

    Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

  16. 7.8CVE-2025-26688EPSS 0.6%

    Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

  17. 7.5CVE-2025-26687EPSS 1.2%

    Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

  18. 7.5CVE-2025-26686EPSS 1.4%

    Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  19. 7.5CVE-2025-26680EPSS 2.0%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  20. 7.8CVE-2025-26679EPSS 0.6%

    Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.

  21. 6.5CVE-2025-26676EPSS 1.7%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  22. 7.5CVE-2025-26673EPSS 2.7%

    Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

  23. 6.5CVE-2025-26672EPSS 1.9%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  24. 8.1CVE-2025-26671EPSS 1.2%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  25. 8.1CVE-2025-26670EPSS 11%

    Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

  26. 8.8CVE-2025-26669EPSS 1.5%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  27. 7.5CVE-2025-26668EPSS 1.3%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  28. 6.5CVE-2025-26667EPSS 1.9%

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  29. 7.0CVE-2025-26665EPSS 0.3%

    Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

  30. 6.5CVE-2025-26664EPSS 1.9%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  31. 8.1CVE-2025-26663EPSS 1.8%

    Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

  32. 7.5CVE-2025-26652EPSS 2.4%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  33. 7.8CVE-2025-26648EPSS 0.5%

    Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

  34. 8.8CVE-2025-26647EPSS 2.3%

    Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

  35. 7.5CVE-2025-26641EPSS 2.3%

    Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

  36. 6.8CVE-2025-26637EPSS 0.9%

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  37. 7.8CVE-2025-24073EPSS 0.6%

    Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  38. 8.8CVE-2025-21222EPSS 1.4%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  39. 8.8CVE-2025-21221EPSS 1.4%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  40. 8.8CVE-2025-21205EPSS 1.4%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  41. 7.8CVE-2025-21204EPSS 7.1%

    Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

  42. 6.5CVE-2025-21203EPSS 1.7%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  43. 6.5CVE-2025-21197EPSS 3.3%

    Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.

  44. 7.0CVE-2025-21191EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

  45. 7.5CVE-2025-21174EPSS 2.2%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  46. 8.8CVE-2025-26645EPSS 3.2%

    Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  47. 7.5CVE-2025-26634EPSS 0.7%

    Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

  48. 7.0CVE-2025-26633KEVExploitEPSS 30%

    Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

  49. 7.1CVE-2025-25008EPSS 0.6%

    Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

  50. 6.5CVE-2025-24996EPSS 1.3%

    External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.