Microsoft Windows Server 2016 vulnerabilities

CVE-2026-78453 Medium · 6.5 CWE-191 Sep 8, 2026

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-78449 High · 8.1 CWE-416 Sep 8, 2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-78448 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78447 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78445 Critical · 9.8 CWE-416 Sep 8, 2026

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-78446 High · 7.5 CWE-416 Sep 8, 2026

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-77905 High · 7.0 CWE-416 Sep 8, 2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-77904 High · 7.8 CWE-122 Sep 8, 2026

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77896 High · 7.5 CWE-190 Sep 8, 2026

Windows Remote Desktop Client Denial of Service Vulnerability

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

CVE-2026-77895 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77894 High · 7.0 CWE-362 Sep 8, 2026

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-77893 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77892 Medium · 6.8 CWE-693 Sep 8, 2026

Windows Boot Manager Elevation of Privilege Vulnerability

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-77891 Medium · 6.4 CWE-125 Sep 8, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

CVE-2026-77890 High · 7.5 CWE-843 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77889 High · 7.5 CWE-843 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77888 High · 7.5 CWE-843 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77887 Medium · 6.4 CWE-125 Sep 8, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

CVE-2026-77886 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77505 High · 8.1 CWE-416 Sep 8, 2026

Windows DNS Server Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-77504 High · 8.8 CWE-415 Sep 8, 2026

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77503 High · 7.8 CWE-125 Sep 8, 2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2026-77502 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77501 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77500 High · 7.8 CWE-763 Sep 8, 2026

Windows Device Association Service Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.