Skip to content

Known vulnerabilities in Microsoft Windows Server 2016

Is your version affected?

CVE Summary Score Published
CVE-2026-96928 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96920 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-96921 Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an… 5.5 Medium Oct 13, 2026
CVE-2026-96935 Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker… 5.5 Medium Oct 13, 2026
CVE-2026-96856 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-96867 Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-96859 Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-96860 Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-96861 Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a… 7.5 High Oct 13, 2026
CVE-2026-96862 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96864 Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-96865 Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an… 5.6 Medium Oct 13, 2026
CVE-2026-96318 Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96866 Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a… 7.5 High Oct 13, 2026
CVE-2026-96312 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96314 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-96851 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-96315 Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally 5.5 Medium Oct 13, 2026
CVE-2026-96316 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform… 5.5 Medium Oct 13, 2026
CVE-2026-96244 Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96245 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 7.5 High Oct 13, 2026
CVE-2026-96308 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96246 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network 7.5 High Oct 13, 2026
CVE-2026-96247 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-96302 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026

Other Microsoft products