Microsoft Windows Server 2016 vulnerabilities

CVE-2021-1722 [CRITICAL] CVE-2021-1722: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability

CVE-2022-35744 [CRITICAL] CVE-2022-35744: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVE-2019-1384 [CRITICAL] CWE-522 CVE-2019-1384: A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the sessio A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

CVE-2022-21993 [HIGH] CVE-2022-21993: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVE-2019-0790 [HIGH] CWE-611 CVE-2019-0790: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser proce A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0791, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.

CVE-2021-34494 [HIGH] CVE-2021-34494: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability

CVE-2022-35841 [HIGH] CVE-2022-35841: Windows Enterprise App Management Service Remote Code Execution Vulnerability Windows Enterprise App Management Service Remote Code Execution Vulnerability

CVE-2026-83693 [CRITICAL] CWE-122 CVE-2026-83693: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83780 [CRITICAL] CWE-416 CVE-2026-83780: Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83519 [CRITICAL] CWE-122 CVE-2026-83519: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-68839 [CRITICAL] CWE-20 CVE-2026-68839: Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-77493 [CRITICAL] CWE-415 CVE-2026-77493: Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a n Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69493 [CRITICAL] CWE-122 CVE-2026-69493: Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-56190 [CRITICAL] CWE-908 CVE-2026-56190: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

CVE-2026-70275 [CRITICAL] CWE-822 CVE-2026-70275: Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute co Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83748 [CRITICAL] CWE-122 CVE-2026-83748: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-97815 [CRITICAL] CWE-122 CVE-2026-97815: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2019-1212 [CRITICAL] CWE-787 CVE-2019-1212: A memory corruption vulnerability exists in the Windows Server DHCP service when processing speciall A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DH

CVE-2018-0823 [HIGH] CVE-2018-0823: The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an ele The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".

CVE-2020-1281 [HIGH] CWE-190 CVE-2020-1281: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate u A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.