Skip to content

Vulnerabilities of Microsoft Windows Server 2019 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-88133 Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-88142 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.8 High Oct 13, 2026
CVE-2026-88115 Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88135 Improper access control in WebDAV allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88147 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-88118 Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker… 7.8 High Oct 13, 2026
CVE-2026-88128 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88149 Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-88171 Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-88152 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-88174 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment… 8.1 High Oct 13, 2026
CVE-2026-87702 Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-87715 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-88134 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88103 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-88072 Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88126 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88127 Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87698 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-85943 Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized… 7.0 High Oct 13, 2026
CVE-2026-87699 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87700 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87704 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87693 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-87705 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to… 7.4 High Oct 13, 2026

Other Microsoft products