KB5005030: Windows Server 2016 Cumulative Update (August 2021)

Attackers targeting unpatched Windows Server 2016 systems can exploit the vulnerabilities addressed in KB5005030 for privilege escalation, lateral movement, and in some cases remote code execution. Servers missing multiple monthly updates accumulate multiple unpatched attack paths simultaneously.

KB5005030 bundles all security fixes for Windows Server 2016 since the July 2021 cumulative update. It addresses vulnerabilities across the Windows kernel, networking stack, print spooler, and Remote Desktop services. Cumulative updates must be applied as a complete package.

Probably yes if any of these apply:

An organisation running automated vulnerability scans identifies a cluster of Windows Server 2016 systems missing the August 2021 update. The missing patches include a privilege escalation vulnerability in the Windows kernel that has a public PoC. The exposure window between Patch Tuesday and the organisation's 30-day patching SLA creates unnecessary risk.