Microsoft Windows Server 2016 vulnerabilities

CVE-2026-85339 [HIGH] CWE-122 CVE-2026-85339: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62823 [HIGH] CWE-122 CVE-2026-62823: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-70127 [HIGH] CWE-416 CVE-2026-70127: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-77505 [HIGH] CWE-416 CVE-2026-77505: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-72981 [HIGH] CWE-416 CVE-2026-72981: Use after free in IP Helper allows an unauthorized attacker to execute code over a network. Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVE-2026-69989 [HIGH] CWE-416 CVE-2026-69989: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-50686 [HIGH] CWE-843 CVE-2026-50686: Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.

CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2026-69802 [HIGH] CWE-1390 CVE-2026-69802: Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to e Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

CVE-2018-8210 [HIGH] CWE-404 CVE-2018-8210: A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8213.

CVE-2021-1700 [HIGH] CVE-2021-1700: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-1701 [HIGH] CVE-2021-1701: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-1667 [HIGH] CVE-2021-1667: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2019-1311 [HIGH] CVE-2019-1311: A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.

CVE-2019-1456 [HIGH] CVE-2019-1456: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manage A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.

CVE-2022-21881 [HIGH] CWE-362 CVE-2022-21881: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability