Microsoft Windows Server 2016 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2016: 2296 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2016
CVE-2026-69394
High · 7.0
CWE-122 Sep 8, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69393
Medium · 5.7
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVE-2026-69391
High · 7.8
CWE-121 Sep 8, 2026
Windows Broker Infrastructure Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69390
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69389
High · 7.8
CWE-122 Sep 8, 2026
Windows Storage Management Provider Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-69385
High · 7.0
CWE-362 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-69384
High · 7.1
CWE-476 Sep 8, 2026
Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVE-2026-69381
Medium · 4.6
CWE-125 Sep 8, 2026
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-69376
Medium · 5.5
CWE-125 Sep 8, 2026
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69373
Medium · 6.7
CWE-125 Sep 8, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69372
Medium · 5.7
CWE-125 Sep 8, 2026
Windows Network File System Denial of Service Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
CVE-2026-69371
High · 8.0
CWE-122 Sep 8, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
CVE-2026-69369
Medium · 5.5
CWE-125 Sep 8, 2026
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69368
High · 7.8
CWE-122 Sep 8, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69367
Medium · 5.5
CWE-125 Sep 8, 2026
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69366
High · 7.1
CWE-416 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-69364
High · 7.1
CWE-362 Sep 8, 2026
Windows Print Spooler Components Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-69362
High · 7.0
CWE-416 Sep 8, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69360
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69359
High · 7.8
CWE-122 Sep 8, 2026
Active Directory Domain Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69358
High · 7.1
CWE-908 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2026-69357
High · 7.1
CWE-416 Sep 8, 2026
Windows NDIS Elevation of Privilege Vulnerability
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69353
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Text Shaping Information Disclosure Vulnerability
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
CVE-2026-69352
High · 7.8
CWE-20 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69351
Medium · 5.5
CWE-359 Sep 8, 2026
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.