Skip to content

Known vulnerabilities in Microsoft Windows Server 2016

Is your version affected?

CVE Summary Score Published
CVE-2026-69539 Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-69582 Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69527 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69621 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69514 Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a… 7.5 High Sep 8, 2026
CVE-2026-69551 Use after free in Windows DNS allows an authorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69504 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69500 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69505 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69531 Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to… 5.5 Medium Sep 8, 2026
CVE-2026-69495 Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a… 8.8 High Sep 8, 2026
CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69494 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69479 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally 8.4 High Sep 8, 2026
CVE-2026-69481 Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over… 8.0 High Sep 8, 2026
CVE-2026-69470 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69473 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69468 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-69472 Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69461 Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69485 Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69450 Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69451 Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026

Other Microsoft products