Skip to content

Known vulnerabilities in Microsoft Windows Server 2019 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-41092 Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-47291 Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-47288 Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent… 7.1 High Jun 9, 2026
CVE-2026-47289 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Jun 9, 2026
CVE-2026-45656 Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally 7.8 High Jun 9, 2026
CVE-2026-45655 Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a… 5.3 Medium Jun 9, 2026
CVE-2026-45642 Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an… 3.9 Low Jun 9, 2026
CVE-2026-45634 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally 5.5 Medium Jun 9, 2026
CVE-2026-45606 Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally 5.5 Medium Jun 9, 2026
CVE-2026-45607 Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally 8.4 High Jun 9, 2026
CVE-2026-45639 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network 7.5 High Jun 9, 2026
CVE-2026-45605 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-34335 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Jun 9, 2026
CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-33828 Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-41108 Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally 7.0 High Jun 9, 2026
CVE-2026-41097 Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security… 6.7 Medium May 12, 2026
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability 7.4 High May 12, 2026
CVE-2026-40403 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally 8.8 High May 12, 2026
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability 7.1 High May 12, 2026
CVE-2026-40398 Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-32209 Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature… 4.4 Medium May 12, 2026
CVE-2026-40397 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High May 12, 2026
CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026

Other Microsoft products