Microsoft Windows Server 2016 vulnerabilities

CVE-2026-70566 High · 7.8 CWE-476 Oct 13, 2026

Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70303 High · 7.8 CWE-787 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70295 Medium · 5.5 CWE-125 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70294 Medium · 5.5 CWE-20 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70293 Medium · 5.5 CWE-908 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70292 Medium · 5.5 CWE-125 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70288 Medium · 5.5 CWE-367 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70286 High · 7.8 CWE-122 Oct 13, 2026

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70285 High · 7.8 CWE-122 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70284 Medium · 5.5 CWE-908 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70278 High · 7.8 CWE-122 Oct 13, 2026

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-70277 Medium · 5.5 CWE-125 Oct 13, 2026

Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

CVE-2026-70275 High · 8.8 CWE-822 Oct 13, 2026

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70272 High · 7.0 CWE-416 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70271 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70270 Medium · 5.5 CWE-822 Oct 13, 2026

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70262 High · 8.8 CWE-122 Oct 13, 2026

WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70261 Medium · 5.5 CWE-497 Oct 13, 2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70260 Medium · 5.5 CWE-497 Oct 13, 2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70258 High · 8.8 CWE-122 Oct 13, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-70253 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70252 High · 7.0 CWE-416 Oct 13, 2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70250 High · 8.8 CWE-362 Oct 13, 2026

Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70249 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70248 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.