VulnSea

windows_server_2016 vulnerabilities

CVEs whose affected-version data names the windows_server_2016 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1350 CVEsRSS

CVE-2026-41087Medium· 5.5
2mo ago

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.48%via NVD
CVE-2026-40422Medium· 5.5
2mo ago

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.40%via NVD
CVE-2026-40400High· 8.0
2mo ago

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.87%via NVD
CVE-2026-40378High· 7.5
2mo ago

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

▾ Twilightmicrosoft · windows_10_1607EPSS 1.2%via NVD
CVE-2026-34346Medium· 5.5
2mo ago

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.27%via NVD
CVE-2026-33842Medium· 5.5
2mo ago

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.48%via NVD
CVE-2026-41108High· 7.0
3mo ago

Windows DNS Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.26%via CVEORG
CVE-2026-34335High· 7.0
3mo ago

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.26%via CVEORG
CVE-2026-40409High· 7.8
3mo ago

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.33%via CVEORG
CVE-2026-40404High· 7.8
3mo ago

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.33%via CVEORG
CVE-2026-33828High· 7.8
3mo ago

Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.33%via CVEORG
CVE-2026-45605High· 7.8
3mo ago

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.33%via CVEORG
CVE-2026-45607High· 8.4
3mo ago

Windows Hyper-V Remote Code Execution Vulnerability

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.34%via CVEORG
CVE-2026-45606Medium· 5.5
3mo ago

Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.40%via CVEORG
CVE-2026-45634Medium· 5.5
3mo ago

Windows DHCP Client Information Disclosure Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.40%via CVEORG
CVE-2026-45642Low· 3.9
3mo ago

Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.37%via CVEORG
CVE-2026-45656High· 7.8
3mo ago

UEFI Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.33%via CVEORG
CVE-2026-45655Medium· 5.3
3mo ago

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.47%via CVEORG
CVE-2026-47291Critical· 9.8
3mo ago

HTTP.sys Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

▾ MidnightMicrosoft · Windows 10 Version 1607EPSS 0.97%via CVEORG
CVE-2026-47289High· 8.8
3mo ago

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.82%via CVEORG
CVE-2026-47288High· 7.1
3mo ago

Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

▾ TwilightMicrosoft · Windows Server 2012EPSS 0.45%via CVEORG
CVE-2026-41092High· 7.8
3mo ago

Microsoft Kinect Elevation of Privilege Vulnerability

Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.30%via CVEORG
CVE-2026-45588High· 7.9
3mo ago

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.35%via CVEORG
CVE-2026-47648High· 7.0
3mo ago

Windows Storage Elevation of Privilege Vulnerability

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.28%via CVEORG
CVE-2026-47654High· 7.5
3mo ago

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows Server 2016EPSS 0.61%via CVEORG
CVE-2026-47653High· 8.8
3mo ago

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.82%via CVEORG
CVE-2026-48568High· 7.9
3mo ago

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.35%via CVEORG
CVE-2026-48573High· 7.9
3mo ago

Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 2.3%via CVEORG
CVE-2026-48570High· 7.9
3mo ago

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.35%via CVEORG
CVE-2026-48578High· 7.9
3mo ago

Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.34%via CVEORG
windows_server_2016 vulnerabilities (CVEs) — page 33 · VulnSea