CVE Intelligence

Microsoft Windows Server 2019 (Server Core installation) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows Server 2019 (Server Core installation): 2666 record(s), with affected versions and fixes.

CVE-2026-70109 High · 7.8 CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70108 High · 7.8 CWE-122 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70106 High · 7.8 CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70104 High · 7.8 CWE-822 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70103 High · 7.8 CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-70102 High · 7.8 CWE-416 Oct 13, 2026
Windows Spaceport.sys Elevation of Privilege Vulnerability
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-70096 Critical · 9.8 CWE-122 Oct 13, 2026
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
CVE-2026-70095 High · 7.5 CWE-122 Oct 13, 2026
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-70093 High · 7.8 CWE-122 Oct 13, 2026
Windows Rich Text Edit Control Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
CVE-2026-70092 High · 7.8 CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70090 Medium · 5.5 CWE-908 Oct 13, 2026
Windows Netlogon Information Disclosure Vulnerability
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
CVE-2026-70089 High · 8.8 CWE-122 Oct 13, 2026
Windows GDI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
CVE-2026-70087 Medium · 5.5 CWE-863 Oct 13, 2026
Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-70086 High · 7.0 CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70085 Medium · 5.5 CWE-862 Oct 13, 2026
Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-70084 Medium · 5.5 CWE-22 Oct 13, 2026
Windows Projected File System Information Disclosure Vulnerability
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-70083 Medium · 5.5 CWE-863 Oct 13, 2026
Role: DNS Server Tampering Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-70082 High · 7.5 CWE-248 Oct 13, 2026
Windows DNS Denial of Service Vulnerability
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-70079 High · 7.5 CWE-841 Oct 13, 2026
Windows DNS Denial of Service Vulnerability
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-70077 Medium · 4.7 CWE-416 Oct 13, 2026
Windows Kernel Information Disclosure Vulnerability
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-70075 Medium · 4.4 CWE-367 Oct 13, 2026
Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
CVE-2026-70074 Medium · 5.5 CWE-125 Oct 13, 2026
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-70072 Medium · 6.5 CWE-770 Oct 13, 2026
Windows Netlogon Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
CVE-2026-70071 Medium · 5.5 CWE-347 Oct 13, 2026
Role: DNS Server Tampering Vulnerability
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-70069 High · 8.8 CWE-121 Oct 13, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.