cbcvebase.

Microsoft Windows Server 2016 vulnerabilities

6,033 known vulnerabilities affecting microsoft/windows_server_2016.

Total CVEs
6,033
CISA KEV
121
actively exploited
Public exploits
174
Exploited in wild
181
Severity breakdown
CRITICAL215HIGH4237MEDIUM1559LOW22

Vulnerabilities

Page 68 of 302
CVE-2026-83640P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83640 [HIGH] CWE-122 CVE-2026-83640: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83650P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83650 [HIGH] CWE-122 CVE-2026-83650: Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83829P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83829 [HIGH] CWE-122 CVE-2026-83829: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96843P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96843 [HIGH] CWE-122 CVE-2026-96843: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83652P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83652 [HIGH] CWE-122 CVE-2026-83652: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83833P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83833 [HIGH] CWE-122 CVE-2026-83833: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83850P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83850 [HIGH] CWE-122 CVE-2026-83850: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69963P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69963 [HIGH] CWE-122 CVE-2026-69963: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83847P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83847 [HIGH] CWE-122 CVE-2026-83847: Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69909P3HIGHCVSS 7.8fixed in 10.0.14393.9612≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69909 [HIGH] CWE-122 CVE-2026-69909: Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72927P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72927 [HIGH] CWE-122 CVE-2026-72927: Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70330P3HIGHCVSS 7.8fixed in 10.0.14393.9418≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-70330 [HIGH] CWE-122 CVE-2026-70330: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70304P3HIGHCVSS 7.8fixed in 10.0.14393.9418≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-70304 [HIGH] CWE-122 CVE-2026-70304: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54992P3HIGHCVSS 7.8fixed in 10.0.14393.9339≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-54992 [HIGH] CWE-122 CVE-2026-54992: Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-69478P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69478 [HIGH] CWE-122 CVE-2026-69478: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72941P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72941 [HIGH] CWE-122 CVE-2026-72941: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83967P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-83967 [HIGH] CWE-122 CVE-2026-83967: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69456P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69456 [HIGH] CWE-122 CVE-2026-69456: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69691P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69691 [HIGH] CWE-122 CVE-2026-69691: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69476P3HIGHCVSS 7.8fixed in 10.0.14393.9512≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69476 [HIGH] CWE-122 CVE-2026-69476: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows Server 2016 vulnerabilities | cvebase