Microsoft Windows Server 2016 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2016: 2296 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2016
CVE-2026-68830
Medium · 5.5
CWE-59 Sep 8, 2026
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
CVE-2026-68828
High · 8.8
CWE-122 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-68827
High · 8.0
CWE-122 Sep 8, 2026
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVE-2026-62813
High · 7.5
CWE-416 Sep 8, 2026
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-62810
High · 7.8
CWE-122 Sep 8, 2026
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-62801
Medium · 6.5
CWE-22 Sep 8, 2026
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-62762
Medium · 6.5
CWE-476 Sep 8, 2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-62759
High · 7.5
CWE-290 Sep 8, 2026
Windows Netlogon Spoofing Vulnerability
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-62706
High · 8.8
CWE-121 Sep 8, 2026
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-62694
High · 7.0
CWE-416 Sep 8, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-56177
High · 7.8
CWE-416 Sep 8, 2026
Windows Server Elevation of Privilege Vulnerability
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-50349
High · 7.0
CWE-362 Sep 8, 2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-62727
High · 7.0
CWE-362 Aug 19, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70347
High · 7.8
CWE-122 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346
High · 7.8
CWE-121 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345
High · 7.8
CWE-122 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344
High · 7.8
CWE-121 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70330
High · 7.8
CWE-122 Aug 11, 2026
Windows DNS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70307
High · 7.0
CWE-416 Aug 11, 2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70304
High · 7.8
CWE-122 Aug 11, 2026
Windows DNS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-68819
High · 7.5
CWE-126 Aug 11, 2026
Windows Network File System Denial of Service Vulnerability
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-68820
High · 7.0
KEV High · 51 Public exploit CWE-416 Aug 11, 2026
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-66799
High · 7.8
CWE-122 Aug 11, 2026
Windows Key Guard Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-65814
High · 7.8
CWE-122 Aug 11, 2026
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65799
High · 7.8
CWE-122 Aug 11, 2026
Windows DNS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.