Microsoft Windows Server 2016 vulnerabilities

CVE-2026-83780 Critical · 9.8 CWE-416 Oct 13, 2026

Windows CCFFilter Driver Remote Code Execution Vulnerability

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83779 High · 7.8 CWE-122 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83778 High · 8.8 CWE-122 Oct 13, 2026

Microsoft Internet Messaging API Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

CVE-2026-83777 High · 8.8 CWE-122 Oct 13, 2026

Windows Bluetooth Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83776 Medium · 6.8 CWE-125 Oct 13, 2026

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-83775 High · 7.0 CWE-122 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83774 Medium · 4.7 CWE-497 Oct 13, 2026

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83770 Critical · 9.8 CWE-122 Oct 13, 2026

Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-83767 High · 7.8 CWE-121 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83766 Medium · 4.2 CWE-863 Oct 13, 2026

Windows Hyper-V Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-83765 Medium · 5.5 CWE-125 Oct 13, 2026

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83760 Medium · 5.5 CWE-125 Oct 13, 2026

Microsoft Bluetooth Driver Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

CVE-2026-83759 High · 8.8 CWE-94 Oct 13, 2026

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

CVE-2026-83758 High · 7.8 CWE-122 Oct 13, 2026

Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83755 Medium · 5.5 CWE-908 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-83752 High · 7.0 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83750 High · 7.0 CWE-122 Oct 13, 2026

Windows Error Reporting Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83749 High · 7.0 CWE-416 Oct 13, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83748 Critical · 9.8 CWE-122 Oct 13, 2026

Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83747 Medium · 5.5 CWE-125 Oct 13, 2026

Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83738 High · 7.0 CWE-362 Oct 13, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-83737 Medium · 5.5 CWE-125 Oct 13, 2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83733 Medium · 5.5 CWE-125 Oct 13, 2026

Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-83732 High · 7.8 CWE-416 Oct 13, 2026

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83728 High · 8.8 CWE-1286 Oct 13, 2026

Windows Hyper-V Spoofing Vulnerability

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.