← Back

Windows Server 2016

windows_server_2016

Vendor: Microsoft • 5,977 CVEs

CVEs (5,977)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.