Windows Server 2016 (Server Core installation)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

7critical217high318medium49low

updated 2026-10-28

vulnerabilities (1,999)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	10.0.14393.4470	2021-07-02	2 versions
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	10.0.14393.6167	2023-07-11	2 versions
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	10.0.14393.5192	2022-06-01	2 versions
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	10.0.14393.4651	2021-09-15	2 versions
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	10.0.14393.6452	2023-11-14	2 versions
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	10.0.14393.8148	2025-06-10	2 versions
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	10.0.14393.7515	2024-11-12	2 versions
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	10.0.14393.7159	2024-07-09	2 versions
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	10.0.14393.5850	2022-05-10	2 versions
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	10.0.14393.8148	2025-06-10	2 versions
CVE-2021-42287US	medium6.5OT critical	77.2% (100th)	KEV	10.0.14393.4770	2021-11-10	2 versions
CVE-2021-42278US	medium6.5OT critical	73.3% (99th)	KEV	10.0.14393.4770	2021-11-10	2 versions
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	10.0.14393.7070	2024-06-11	2 versions
CVE-2021-36942US	medium5.0OT critical	66.0% (99th)	KEV	10.0.14393.4583	2021-08-12	2 versions
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	10.0.14393.8868	2026-02-10	2 versions
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	10.0.14393.5850	2023-04-11	2 versions
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	10.0.14393.6085	2023-07-11	2 versions
CVE-2023-29336US	—OT critical	41.2% (99th)	KEV	10.0.14393.5921	2023-05-09	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	10.0.14393.4946	2022-02-09	2 versions
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	10.0.14393.5648	2023-01-10	2 versions
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	10.0.14393.7259	2024-08-13	2 versions
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	10.0.14393.5356	2022-09-13	2 versions
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	10.0.14393.8066	2025-05-13	2 versions
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	10.0.14393.7606	2024-12-12	2 versions
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	10.0.14393.7070	2024-06-11	2 versions
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	10.0.14393.5989	2023-06-14	2 versions
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	10.0.14393.7969	2025-04-08	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	10.0.14393.4946	2022-02-09	2 versions
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	10.0.14393.5066	2022-04-15	2 versions
CVE-2024-49039US	—OT critical	14.2% (97th)	KEV	10.0.14393.7515	2024-11-12	2 versions
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	10.0.14393.6452	2023-11-14	2 versions
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	10.0.14393.5066	2022-04-15	2 versions
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	10.0.14393.6981	2024-05-14	2 versions
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	10.0.14393.5717	2023-02-14	2 versions
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	10.0.14393.8868	2026-02-10	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	10.0.14393.4651	2021-09-15	2 versions
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	10.0.14393.6796	2024-03-12	2 versions
CVE-2025-32709US	—OT critical	1.82% (79th)	KEV	10.0.14393.8066	2025-05-13	2 versions
CVE-2023-28229US	—OT critical	1.67% (77th)	KEV	10.0.14393.5850	2023-04-11	2 versions
CVE-2023-24880US	—OT critical	78.0% (100th)	KEV	10.0.14393.5786	2023-03-14	2 versions
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	10.0.14393.5291	2022-08-09	2 versions
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	10.0.14393.7428	2024-10-08	2 versions
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	10.0.14393.7336	2024-09-10	2 versions
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	10.0.14393.7428	2024-10-08	2 versions
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	10.0.14393.7259	2024-08-13	2 versions
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	10.0.14393.4583	2021-08-12	2 versions
CVE-2023-36563US	medium5.5OT critical	20.3% (97th)	KEV	10.0.14393.6351	2023-10-10	2 versions
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	10.0.14393.4770	2021-11-10	2 versions
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	10.0.14393.5246	2022-07-12	2 versions
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	10.0.14393.6452	2023-11-14	2 versions

showing 50 of 1,999

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation391 CVEs
CWE-264CWE-264273 CVEs
CWE-122Heap-based Buffer Overflow229 CVEs
CWE-269Improper Privilege Management178 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')177 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor175 CVEs
CWE-416Use After Free168 CVEs
CWE-125Out-of-bounds Read141 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)1,999 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan