Microsoft Windows Server 2016 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2016: 2296 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2016
CVE-2026-62743
Medium · 5.5
CWE-125 Aug 11, 2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62742
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62741
High · 7.8
CWE-122 Aug 11, 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62740
Medium · 5.5
CWE-908 Aug 11, 2026
Windows Imaging Component Information Disclosure Vulnerability
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-62738
Medium · 5.5
CWE-125 Aug 11, 2026
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-62735
High · 7.8
CWE-122 Aug 11, 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62734
High · 7.0
CWE-362 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62733
High · 7.8
CWE-125 Aug 11, 2026
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62732
High · 7.8
CWE-122 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62730
Medium · 5.5
CWE-126 Aug 11, 2026
Windows Wired AutoConfig Service Information Disclosure Vulnerability
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
CVE-2026-62729
High · 7.0
CWE-362 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62728
High · 7.0
CWE-125 Aug 11, 2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62726
High · 7.0
CWE-416 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62725
High · 7.0
CWE-416 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62724
High · 7.0
CWE-416 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62723
High · 7.0
CWE-416 Aug 11, 2026
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62721
High · 7.8
CWE-1220 Aug 11, 2026
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
CVE-2026-62720
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62719
High · 7.8
CWE-122 Aug 11, 2026
Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62718
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62717
High · 7.8
CWE-122 Aug 11, 2026
Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62716
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62715
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62714
Medium · 6.5
CWE-125 Aug 11, 2026
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62711
High · 7.8
CWE-416 Aug 11, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.