VulnSea

windows_server_2016 vulnerabilities

CVEs whose affected-version data names the windows_server_2016 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2129 CVEsRSS

CVE-2026-69997High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69996High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69995High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69994High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69992High· 7.5
3w ago

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69991High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69988High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69987High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69986High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69984High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69982Medium· 5.9
3w ago

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.65%via NVD
CVE-2026-69977High· 7.0
3w ago

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.30%via NVD
CVE-2026-69976High· 7.5
3w ago

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.63%via NVD
CVE-2026-69970High· 7.0
3w ago

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.27%via NVD
CVE-2026-69967Medium· 5.5
3w ago

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

▾ SunlitMicrosoft · Windows 10 Version 1607EPSS 0.46%via NVD
CVE-2026-69966High· 7.8
3w ago

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.34%via NVD
CVE-2026-69964High· 7.0
3w ago

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.27%via NVD
CVE-2026-69963High· 7.8
3w ago

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.34%via NVD
CVE-2026-69959High· 7.8
3w ago

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69958Medium· 6.8
3w ago

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.50%via NVD
CVE-2026-69957High· 7.8
3w ago

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69955Medium· 6.5
3w ago

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.98%via NVD
CVE-2026-69954Medium· 5.5
3w ago

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.46%via NVD
CVE-2026-69953High· 7.8
3w ago

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69952High· 7.8
3w ago

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69950High· 7.8
3w ago

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69949High· 7.8
3w ago

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-69940Medium· 6.5
3w ago

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · windows_10_1607EPSS 1.0%via NVD
CVE-2026-69918High· 8.8
3w ago

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.41%via NVD
CVE-2026-69916High· 7.8
3w ago

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
windows_server_2016 vulnerabilities (CVEs) — page 22 · VulnSea