Skip to content

Vulnerabilities of Microsoft Windows Server 2016 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-88226 Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a… 4.6 Medium Oct 13, 2026
CVE-2026-96209 Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-100222 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-100225 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-100217 Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-100218 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-100220 Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-69506 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally 4.7 Medium Oct 13, 2026
CVE-2026-88219 Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-100202 Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-100203 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-96118 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96071 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network 7.5 High Oct 13, 2026
CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose… 7.5 High Oct 13, 2026
CVE-2026-96951 Exploited Microsoft Windows Command Injection Vulnerability 8.8 High Oct 13, 2026
CVE-2026-96946 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-96953 Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-96947 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-96948 Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an… 5.5 Medium Oct 13, 2026
CVE-2026-96949 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.0 High Oct 13, 2026
CVE-2026-96950 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-69675 Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-96929 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96938 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate… 6.7 Medium Oct 13, 2026
CVE-2026-96931 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026

Other Microsoft products