Microsoft Windows Server 2019 vulnerabilities, page 3
6,466 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96953microsoftwindows_10_1607+28
EPSS score0.24%
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.CVE-2026-96952microsoftwindows_10_1809+20EPSS score0.78%
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.CVE-2026-96951microsoftoutlook+30KEVEPSS score1.51%
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96950microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96949microsoftwindows_10_1607+28EPSS score0.19%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96948microsoftwindows_10_1607+28EPSS score0.46%
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.CVE-2026-96947microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96946microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96945microsoftwindows_server_2019+4EPSS score0.82%
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.CVE-2026-96938microsoftwindows_10_1607+28EPSS score0.33%
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96935microsoftwindows_10_1607+28EPSS score0.35%
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96934microsoftwindows_10_1607+14EPSS score0.71%
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.CVE-2026-96933microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.CVE-2026-96932microsoftwindows_10_1607+24EPSS score0.19%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.CVE-2026-96931microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96930microsoftwindows_10_1607+28EPSS score0.39%
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.CVE-2026-96929microsoftwindows 10 version 1607+19EPSS score0.36%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-96928microsoftwindows_10_1607+28EPSS score0.31%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96927microsoftwindows_10_1607+28EPSS score0.30%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96926microsoftwindows_10_1607+14EPSS score0.28%
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.