Skip to content

Known vulnerabilities in Microsoft Windows Server 2016 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-83583 Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83584 Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69633 Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69650 Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-69830 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server… 8.1 High Oct 13, 2026
CVE-2026-81969 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-83500 Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a… 6.1 Medium Oct 13, 2026
CVE-2026-69387 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69721 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-69644 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-69883 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69354 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-68836 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69521 Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-70252 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70278 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70271 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70272 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70284 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-70285 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70234 Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70223 Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70225 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 High Oct 13, 2026

Other Microsoft products