Skip to content

Known vulnerabilities in Microsoft Windows Server 2019

Is your version affected?

CVE Summary Score Published
CVE-2026-70290 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-83976 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83975 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83974 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83979 Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83988 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83969 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83955 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83986 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69492 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69573 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-72937 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69827 Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an… 8.1 High Sep 8, 2026
CVE-2026-72947 Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate… 6.4 Medium Sep 8, 2026
CVE-2026-69989 Use after free in DNS Server allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-70065 Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny… 7.5 High Sep 8, 2026
CVE-2026-83942 Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-81355 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code… 7.5 High Sep 8, 2026
CVE-2026-80093 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-80075 Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-78523 Use after free in Windows DNS allows an unauthorized attacker to deny service over a network 5.9 Medium Sep 8, 2026
CVE-2026-78508 Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical… 4.6 Medium Sep 8, 2026
CVE-2026-77904 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-77896 Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network 6.5 Medium Sep 8, 2026
CVE-2026-77895 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026

Other Microsoft products