Skip to content

Vulnerabilities of Microsoft Windows Server 2016

Is your version affected?

CVE Summary Score Published
CVE-2026-88126 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88127 Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87698 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-85943 Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized… 7.0 High Oct 13, 2026
CVE-2026-87699 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87700 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87704 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87693 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87705 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to… 7.4 High Oct 13, 2026
CVE-2026-87694 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85941 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer… 7.0 High Oct 13, 2026
CVE-2026-88076 Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69789 Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute… 7.5 High Oct 13, 2026
CVE-2026-69798 Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83924 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83925 Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally 4.7 Medium Oct 13, 2026
CVE-2026-83934 Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83935 Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-85874 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-83910 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83918 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85908 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85909 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to… 5.5 Medium Oct 13, 2026
CVE-2026-85912 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User… 7.0 High Oct 13, 2026
CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized… 4.7 Medium Oct 13, 2026

Other Microsoft products