cve.bz

microsoft windows server 2016 vulnerabilities, newest first, page 2

Filter
  1. 7.0CVE-2026-96923EPSS 0.3%

    Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

  2. 5.5CVE-2026-96921EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

  3. 7.8CVE-2026-96920EPSS 0.3%

    Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-96918EPSS 0.3%

    Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2026-96916EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  6. 7.8CVE-2026-96915EPSS 0.3%

    Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  7. 8.8CVE-2026-96914EPSS 0.3%

    Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-96913EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-96911EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  10. 5.5CVE-2026-96910EPSS 0.4%

    Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  11. 7.8CVE-2026-96867EPSS 0.3%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

  12. 7.5CVE-2026-96866EPSS 1.1%

    Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

  13. 5.6CVE-2026-96865EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

  14. 9.8CVE-2026-96864EPSS 0.6%

    Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

  15. 7.8CVE-2026-96862EPSS 0.3%

    Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  16. 7.5CVE-2026-96861EPSS 1.1%

    Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

  17. 5.5CVE-2026-96860EPSS 0.4%

    Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

  18. 5.5CVE-2026-96859EPSS 0.4%

    Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

  19. 7.8CVE-2026-96856EPSS 0.3%

    Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  20. 5.5CVE-2026-96854EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

  21. 4.7CVE-2026-96853EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  22. 7.0CVE-2026-96852EPSS 0.3%

    Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  23. 5.5CVE-2026-96851EPSS 0.4%

    Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

  24. 7.8CVE-2026-96847EPSS 0.4%

    Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

  25. 5.5CVE-2026-96846EPSS 0.4%

    Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

  26. 8.0CVE-2026-96844EPSS 0.5%

    Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

  27. 7.8CVE-2026-96843EPSS 0.4%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  28. 7.5CVE-2026-96325EPSS 1.1%

    Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

  29. 7.8CVE-2026-96324EPSS 0.4%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  30. 7.0CVE-2026-96322EPSS 0.3%

    Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

  31. 9.8CVE-2026-96320EPSS 1.1%

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  32. 7.8CVE-2026-96318EPSS 0.3%

    Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

  33. 5.5CVE-2026-96316EPSS 0.3%

    Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

  34. 5.5CVE-2026-96315EPSS 0.3%

    Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

  35. 5.5CVE-2026-96314EPSS 0.4%

    Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

  36. 7.8CVE-2026-96312EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  37. 5.5CVE-2026-96311EPSS 0.3%

    Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

  38. 7.8CVE-2026-96308EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-96307EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-96306EPSS 0.2%

    Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-96305EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-96302EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  43. 5.9CVE-2026-96300EPSS 0.9%

    Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

  44. 9.1CVE-2026-96252EPSS 0.6%

    Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  45. 7.5CVE-2026-96248EPSS 1.1%

    Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

  46. 5.5CVE-2026-96247EPSS 0.4%

    Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

  47. 7.5CVE-2026-96246EPSS 1.0%

    Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

  48. 7.5CVE-2026-96245EPSS 1.0%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  49. 7.8CVE-2026-96244EPSS 0.3%

    Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-96243EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.