Microsoft Windows Server 2016 vulnerabilities, page 5
6,242 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96322microsoftwindows_10_1607+28
EPSS score0.20%
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.CVE-2026-96320microsoftwindows_10_1607+14EPSS score0.91%
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.CVE-2026-96318microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.CVE-2026-96316microsoftwindows_10_1607+28EPSS score0.28%
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.CVE-2026-96315microsoftwindows_10_1607+24EPSS score0.28%
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.CVE-2026-96314microsoftwindows_10_1607+28EPSS score0.39%
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.CVE-2026-96312microsoftwindows_10_1607+26EPSS score0.31%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-96311microsoftwindows_10_1607+27EPSS score0.28%
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.CVE-2026-96308microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-96307microsoftwindows_10_1607+28EPSS score0.20%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-96306microsoftwindows_10_1607+21EPSS score0.24%
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.CVE-2026-96305microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-96302microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-96300microsoftwindows_10_1607+28EPSS score0.82%
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.CVE-2026-96252microsoftwindows_10_1607+14EPSS score0.47%
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-96248microsoftwindows_10_1607+10EPSS score1.13%
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.CVE-2026-96247microsoftwindows_10_1607+27EPSS score0.39%
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.CVE-2026-96246microsoftwindows_10_1607+28EPSS score0.98%
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.CVE-2026-96245microsoftwindows_10_1607+28EPSS score0.98%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.CVE-2026-96244microsoftwindows_10_1607+24EPSS score0.31%
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.