Skip to content

Known vulnerabilities in Microsoft Windows Server 2016 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-50492 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code… 6.8 Medium Jul 14, 2026
CVE-2026-50505 Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network 7.5 High Jul 14, 2026
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jul 14, 2026
CVE-2026-50490 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-50489 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally 8.8 High Jul 14, 2026
CVE-2026-50494 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-50500 Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network 7.5 High Jul 14, 2026
CVE-2026-50485 Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network 4.5 Medium Jul 14, 2026
CVE-2026-50502 Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute… 8.0 High Jul 14, 2026
CVE-2026-50482 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.3 High Jul 14, 2026
CVE-2026-50480 Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to… 7.8 High Jul 14, 2026
CVE-2026-50477 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 8.8 High Jul 14, 2026
CVE-2026-50470 Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over… 7.5 High Jul 14, 2026
CVE-2026-50476 Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-50429 Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network 8.2 High Jul 14, 2026
CVE-2026-50475 Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-50394 Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose… 5.5 Medium Jul 14, 2026
CVE-2026-50444 Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate… 8.8 High Jul 14, 2026
CVE-2026-50411 Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny… 7.5 High Jul 14, 2026
CVE-2026-50474 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Jul 14, 2026
CVE-2026-50362 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code… 7.8 High Jul 14, 2026
CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability 9.8 Critical Jul 14, 2026
CVE-2026-50453 Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose… 6.1 Medium Jul 14, 2026
CVE-2026-50417 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability 5.5 Medium Jul 14, 2026

Other Microsoft products