Microsoft Windows Server 2016 vulnerabilities

CVE-2026-61364 High · 7.8 CWE-306 Aug 11, 2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61363 High · 8.1 CWE-20 Aug 11, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61360 Medium · 5.5 CWE-822 Aug 11, 2026

Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-61353 High · 7.8 CWE-122 Aug 11, 2026

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61352 High · 8.1 CWE-362 Aug 11, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61350 Medium · 4.6 CWE-126 Aug 11, 2026

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-61349 High · 7.8 CWE-362 Aug 11, 2026

Windows Work Folder Service Elevation of Privilege Vulnerability

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61348 High · 7.0 CWE-416 Aug 11, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-61347 Medium · 5.5 CWE-126 Aug 11, 2026

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-61345 Medium · 6.5 CWE-476 Aug 11, 2026

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-59138 Medium · 6.5 CWE-476 Aug 11, 2026

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-59137 Medium · 5.5 CWE-908 Aug 11, 2026

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-59136 Medium · 5.5 CWE-908 Aug 11, 2026

Microsoft COM for Windows Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

CVE-2026-59135 Medium · 5.5 CWE-1390 Aug 11, 2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-59134 High · 8.1 CWE-20 Aug 11, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-59132 High · 7.5 CWE-476 Aug 11, 2026

Windows TCP/IP Denial of Service Vulnerability

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-59131 Medium · 5.6 CWE-1303 Aug 11, 2026

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2026-59130 Medium · 5.6 CWE-1303 Aug 11, 2026

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2026-59128 Medium · 5.5 CWE-125 Aug 11, 2026

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

CVE-2026-59127 High · 7.8 CWE-190 Aug 11, 2026

Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-59125 High · 7.0 CWE-416 Aug 11, 2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-59122 High · 7.0 CWE-362 Aug 11, 2026

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-54984 High · 7.8 CWE-122 Aug 11, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

CVE-2026-54113 High · 7.5 CWE-770 Aug 11, 2026

Remote Procedure Call Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-50472 High · 7.0 CWE-122 Aug 11, 2026

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.