Microsoft Windows Server 2016 vulnerabilities
6,033 known vulnerabilities affecting microsoft/windows_server_2016.
Total CVEs
6,033
CISA KEV
121
actively exploited
Public exploits
174
Exploited in wild
181
Severity breakdown
CRITICAL215HIGH4237MEDIUM1559LOW22
Vulnerabilities
Page 36 of 302
CVE-2026-73023P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-73023 [HIGH] CWE-122 CVE-2026-73023: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69291P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69291 [HIGH] CWE-122 CVE-2026-69291: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70203P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-70203 [HIGH] CWE-122 CVE-2026-70203: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69860P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69860 [HIGH] CWE-122 CVE-2026-69860: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72960P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72960 [HIGH] CWE-122 CVE-2026-72960: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77495P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77495 [HIGH] CWE-122 CVE-2026-77495: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77504P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77504 [HIGH] CWE-415 CVE-2026-77504: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69772P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69772 [HIGH] CWE-122 CVE-2026-69772: Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69511P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69511 [HIGH] CWE-122 CVE-2026-69511: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69434P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69434 [HIGH] CWE-122 CVE-2026-69434: Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72933P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72933 [HIGH] CWE-122 CVE-2026-72933: Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69669P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69669 [HIGH] CWE-122 CVE-2026-69669: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83992P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-83992 [HIGH] CWE-122 CVE-2026-83992: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73013P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-73013 [HIGH] CWE-122 CVE-2026-73013: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62795P3HIGHCVSS 8.8fixed in 10.0.14393.9418≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-62795 [HIGH] CWE-416 CVE-2026-62795: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57094P3HIGHCVSS 8.8fixed in 10.0.14393.9339≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-57094 [HIGH] CWE-122 CVE-2026-57094: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50474P3HIGHCVSS 8.8fixed in 10.0.14393.9339≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50474 [HIGH] CWE-416 CVE-2026-50474: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32157P3HIGHCVSS 8.8fixed in 10.0.14393.90602026-04-14
CVE-2026-32157 [HIGH] CWE-416 CVE-2026-32157: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69717P3HIGHCVSS 8.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69717 [HIGH] CWE-125 CVE-2026-69717: Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-47653P3HIGHCVSS 8.8fixed in 10.0.14393.9234≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd