microsoft windows server 2016 vulnerabilities, newest first, page 26
Filter
- 8.0CVE-2026-68880EPSS 0.8%
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- 8.0CVE-2026-68878EPSS 0.8%
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2026-68877EPSS 0.3%
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
- 8.0CVE-2026-68876EPSS 0.8%
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2026-68875EPSS 0.3%
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
- 5.7CVE-2026-68874EPSS 0.9%
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
- 5.5CVE-2026-68852EPSS 0.5%
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-68851EPSS 0.4%
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-68848EPSS 0.3%
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- 7.1CVE-2026-68846EPSS 0.6%
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2026-68845EPSS 0.3%
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-68844EPSS 0.3%
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
- 5.5CVE-2026-68843EPSS 0.4%
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-68841EPSS 0.3%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-68840EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-68839EPSS 1.0%
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
- 8.0CVE-2026-68838EPSS 0.8%
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 7.0CVE-2026-68837EPSS 0.3%
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
- 7.1CVE-2026-68835EPSS 0.6%
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
- 8.0CVE-2026-68834EPSS 0.8%
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 6.8CVE-2026-68833EPSS 0.4%
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
- 7.8CVE-2026-68832EPSS 0.3%
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-68831EPSS 0.6%
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-68830EPSS 0.4%
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
- 8.8CVE-2026-68828EPSS 0.8%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- 8.0CVE-2026-68827EPSS 0.8%
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
- 7.5CVE-2026-62813EPSS 0.7%
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- 7.8CVE-2026-62810EPSS 0.3%
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-62801EPSS 0.8%
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
- 6.5CVE-2026-62762EPSS 1.1%
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
- 7.5CVE-2026-62759EPSS 0.4%
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
- 8.8CVE-2026-62706EPSS 0.8%
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-62694EPSS 0.3%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-56177EPSS 0.3%
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-50349EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-62727EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70347EPSS 0.3%
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70346EPSS 0.3%
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70345EPSS 0.3%
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70344EPSS 0.3%
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70330EPSS 0.3%
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-70307EPSS 0.3%
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70304EPSS 0.3%
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-68820KEVEPSS 8.6%
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-68819EPSS 1.0%
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2026-66799EPSS 0.3%
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-65814EPSS 0.3%
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-65799EPSS 0.3%
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-65798EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-65797EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.