Skip to content

Known vulnerabilities in Microsoft Windows Server 2019 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-69265 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-68852 Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-68874 Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose… 5.7 Medium Sep 8, 2026
CVE-2026-68876 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate… 8.0 High Sep 8, 2026
CVE-2026-68880 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-68848 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-68839 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over… 9.8 Critical Sep 8, 2026
CVE-2026-68840 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows… 7.0 High Sep 8, 2026
CVE-2026-68838 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-68834 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-68843 Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-68827 Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a… 8.0 High Sep 8, 2026
CVE-2026-68831 Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker… 5.5 Medium Sep 8, 2026
CVE-2026-68828 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-56172 Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-62813 Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-62759 Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an… 7.5 High Sep 8, 2026
CVE-2026-62762 Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a… 6.5 Medium Sep 8, 2026
CVE-2026-62810 Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-56177 Use after free in Windows Server allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-85880 Exploited Microsoft Windows Heap-Based Buffer Overflow Vulnerability 7.8 High Sep 8, 2026
CVE-2026-84001 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-83998 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-83996 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally 8.8 High Sep 8, 2026
CVE-2026-83991 Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker… 5.5 Medium Sep 8, 2026

Other Microsoft products