windows_server_2016_server_core_installation vulnerabilities

CVEs whose affected-version data names the windows_server_2016_server_core_installation package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

windows_server_2016_server_core_installation vulnerabilities

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.