Microsoft Windows Server 2016 vulnerabilities

CVE-2026-83647 High · 7.5 CWE-125 Oct 13, 2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

CVE-2026-83646 Medium · 4.8 CWE-601 Oct 13, 2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVE-2026-83645 High · 7.5 CWE-770 Oct 13, 2026

Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83644 High · 7.0 CWE-416 Oct 13, 2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83643 High · 8.8 CWE-121 Oct 13, 2026

Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83642 High · 8.8 CWE-843 Oct 13, 2026

Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83641 High · 7.8 CWE-122 Oct 13, 2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640 High · 7.8 CWE-122 Oct 13, 2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639 High · 7.8 CWE-122 Oct 13, 2026

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638 High · 7.8 CWE-122 Oct 13, 2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83637 High · 7.8 CWE-125 Oct 13, 2026

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83635 High · 7.5 CWE-125 Oct 13, 2026

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83588 High · 7.8 CWE-122 Oct 13, 2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 High · 7.8 CWE-822 Oct 13, 2026

Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 High · 7.8 CWE-134 Oct 13, 2026

Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83584 High · 7.0 CWE-416 Oct 13, 2026

Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 High · 7.8 CWE-862 Oct 13, 2026

Windows Geotag Broker Elevation of Privilege Vulnerability

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-83582 Medium · 4.7 CWE-416 Oct 13, 2026

Windows Graphics Kernel Information Disclosure Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-83580 High · 7.0 CWE-122 Oct 13, 2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83579 High · 7.8 CWE-122 Oct 13, 2026

Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83578 Critical · 9.8 CWE-122 Oct 13, 2026

Microsoft PowerShell Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83575 High · 7.0 CWE-416 Oct 13, 2026

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83574 High · 7.0 CWE-416 Oct 13, 2026

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83573 Medium · 6.8 CWE-190 Oct 13, 2026

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-83571 Medium · 5.5 CWE-476 Oct 13, 2026

Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.