cbcvebase.

Microsoft Windows Server 2016 vulnerabilities

6,033 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
6,033
CISA KEV
121
actively exploited
Public exploits
174
Exploited in wild
181
Severity breakdown
CRITICAL215HIGH4237MEDIUM1559LOW22

Vulnerabilities

Page 67 of 302
CVE-2026-70060P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70060 [HIGH] CWE-122 CVE-2026-70060: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69918P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70117P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83896P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83896 [HIGH] CWE-122 CVE-2026-83896: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85902P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85902 [HIGH] CWE-122 CVE-2026-85902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70285P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70285 [HIGH] CWE-122 CVE-2026-70285: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69633P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69633 [HIGH] CWE-122 CVE-2026-69633: Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83579P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83579 [HIGH] CWE-122 CVE-2026-83579: Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68836P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-68836 [HIGH] CWE-122 CVE-2026-68836: Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileg Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70139P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70139 [HIGH] CWE-122 CVE-2026-70139: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96913P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-96913 [HIGH] CWE-122 CVE-2026-96913: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85848P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85848 [HIGH] CWE-122 CVE-2026-85848: Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85832P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85832 [HIGH] CWE-122 CVE-2026-85832: Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83783P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83783 [HIGH] CWE-122 CVE-2026-83783: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50482P3HIGHCVSS 7.8fixed in 10.0.14393.9339≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50482 [HIGH] CWE-122 CVE-2026-50482: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-58640P3HIGHCVSS 7.8fixed in 10.0.14393.9339≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58640 [HIGH] CWE-122 CVE-2026-58640: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83641P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83641 [HIGH] CWE-122 CVE-2026-83641: Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83709P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83709 [HIGH] CWE-122 CVE-2026-83709: Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87699P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-87699 [HIGH] CWE-122 CVE-2026-87699: Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96916P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96916 [HIGH] CWE-122 CVE-2026-96916: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows Server 2016 vulnerabilities | cvebase