Microsoft Windows Server 2019 vulnerabilities, page 2
6,466 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97823microsoftwindows_10_1607+28
EPSS score0.77%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97822microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97821microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97820microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97819microsoftwindows_10_1607+28EPSS score0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97817microsoftwindows_10_1607+28EPSS score0.95%
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97816microsoftwindows_10_1809+20EPSS score0.89%
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.CVE-2026-97815microsoftwindows_10_1607+28EPSS score0.67%
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.CVE-2026-97814microsoftwindows_10_1607+28EPSS score0.97%
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.CVE-2026-97813microsoftwindows_10_1809+20EPSS score0.95%
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.CVE-2026-97811microsoftwindows_10_1809+20EPSS score0.23%
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.CVE-2026-97809microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97808microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97807microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97806microsoftwindows_10_1809+17EPSS score0.33%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97805microsoftwindows_10_1607+28EPSS score0.94%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.CVE-2026-97804microsoftwindows_10_1607+24EPSS score0.32%
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.CVE-2026-97793microsoftwindows_10_1809+20EPSS score0.24%
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.CVE-2026-97789microsoftwindows 10 version 1607+19EPSS score0.56%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-97788microsoftmicrosoft .net framework 3.5+37EPSS score0.68%
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.