Microsoft Windows Server 2016 vulnerabilities

CVE-2024-38076 [CRITICAL] CWE-122 CVE-2024-38076: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2018-8450 [HIGH] CWE-404 CVE-2018-8450: A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Win A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

CVE-2019-1333 [HIGH] CVE-2019-1333: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connec A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

CVE-2026-83910 [CRITICAL] CWE-787 CVE-2026-83910: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-100222 [CRITICAL] CWE-122 CVE-2026-100222: Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-83782 [CRITICAL] CWE-122 CVE-2026-83782: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-69819 [CRITICAL] CWE-787 CVE-2026-69819: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-69705 [CRITICAL] CWE-787 CVE-2026-69705: Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-50439 [CRITICAL] CWE-416 CVE-2026-50439: Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

CVE-2020-1436 [HIGH] CWE-787 CVE-2020-1436: A remote code execution vulnerability exists when the Windows font library improperly handles specia A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerability'.

CVE-2021-43217 [CRITICAL] CVE-2021-43217: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

CVE-2025-21369 [HIGH] CWE-122 CVE-2025-21369: Microsoft Digest Authentication Remote Code Execution Vulnerability Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21368 [HIGH] CWE-122 CVE-2025-21368: Microsoft Digest Authentication Remote Code Execution Vulnerability Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-49744 [HIGH] CWE-122 CVE-2025-49744: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2023-36017 [HIGH] CWE-843 CVE-2023-36017: Windows Scripting Engine Memory Corruption Vulnerability Windows Scripting Engine Memory Corruption Vulnerability

CVE-2026-102217 [HIGH] CWE-41 CVE-2026-102217: Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privilege Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

CVE-2021-36965 [CRITICAL] CVE-2021-36965: Windows WLAN AutoConfig Service Remote Code Execution Vulnerability Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

CVE-2026-73012 [HIGH] CWE-122 CVE-2026-73012: Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-71352 [HIGH] CWE-191 CVE-2026-71352: Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authori Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

CVE-2026-56194 [HIGH] CWE-122 CVE-2026-56194: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.