Microsoft Windows Server 2016 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2016: 2297 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2016
CVE-2026-33842
Medium · 5.5
CWE-200 Jul 14, 2026
Windows File Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-50508
High · 7.5
CWE-200 Jun 9, 2026
Windows NTLM Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-50507
Medium · 6.8
CWE-306 Jun 9, 2026
Windows BitLocker Security Feature Bypass Vulnerability
Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-49160
High · 7.5
CWE-400 Jun 9, 2026
HTTP.sys Denial of Service Vulnerability
Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.
CVE-2026-48583
High · 7.8
CWE-416 Jun 9, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-48578
High · 7.9
CWE-284 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.
CVE-2026-48576
High · 7.9
CWE-1329 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48575
High · 7.9
CWE-693 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48574
High · 7.8
CWE-122 Jun 9, 2026
Windows Media Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
CVE-2026-48573
High · 7.9
CWE-1329 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48570
High · 7.9
CWE-693 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48568
High · 7.9
CWE-693 Jun 9, 2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-47656
High · 7.9
CWE-693 Jun 9, 2026
Windows Boot Manager Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
CVE-2026-47654
High · 7.5
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47653
High · 8.8
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47648
High · 7.0
CWE-426 Jun 9, 2026
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-47291
Critical · 9.8
CWE-122 Jun 9, 2026
HTTP.sys Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.
CVE-2026-47289
High · 8.8
CWE-122 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47288
High · 7.1
CWE-190 Jun 9, 2026
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.
CVE-2026-45658
Medium · 6.8
CWE-284 Jun 9, 2026
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
CVE-2026-45656
High · 7.8
CWE-693 Jun 9, 2026
UEFI Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.
CVE-2026-45655
Medium · 5.3
CWE-693 Jun 9, 2026
Windows BitLocker Security Feature Bypass Vulnerability
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-45653
High · 7.0
CWE-416 Jun 9, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-45642
Low · 3.9
CWE-20 Jun 9, 2026
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
CVE-2026-45639
High · 7.5
CWE-125 Jun 9, 2026
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.