# Microsoft Windows Server 2016 (Server Core installation).

Every CVE that names Microsoft Windows Server 2016 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Performance Monitor Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85333.md)
  `CVE-2026-85333` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85336.md)
  `CVE-2026-85336` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85331.md)
  `CVE-2026-85331` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85327.md)
  `CVE-2026-85327` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85324.md)
  `CVE-2026-85324` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Network Device Enrollment Service (NDES) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-85323.md)
  `CVE-2026-85323` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85322.md)
  `CVE-2026-85322` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85321.md)
  `CVE-2026-85321` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85319.md)
  `CVE-2026-85319` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Windows Print Spooler Components Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85320.md)
  `CVE-2026-85320` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Servicing Stack Updates Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85318.md)
  `CVE-2026-85318` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84018.md)
  `CVE-2026-84018` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-84017.md)
  `CVE-2026-84017` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows EAPHost Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84016.md)
  `CVE-2026-84016` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-84015.md)
  `CVE-2026-84015` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84014.md)
  `CVE-2026-84014` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84013.md)
  `CVE-2026-84013` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-84012.md)
  `CVE-2026-84012` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Desktop Gateway Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-84007.md)
  `CVE-2026-84007` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69886.md)
  `CVE-2026-69886` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83929.md)
  `CVE-2026-83929` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Group Policy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83932.md)
  `CVE-2026-83932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83928.md)
  `CVE-2026-83928` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83920.md)
  `CVE-2026-83920` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Internet Messaging API Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83919.md)
  `CVE-2026-83919` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83921.md)
  `CVE-2026-83921` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83916.md)
  `CVE-2026-83916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft XML Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83914.md)
  `CVE-2026-83914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85841.md)
  `CVE-2026-85841` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83912.md)
  `CVE-2026-83912` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83911.md)
  `CVE-2026-83911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70286.md)
  `CVE-2026-70286` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows CD-ROM File System Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70275.md)
  `CVE-2026-70275` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70248.md)
  `CVE-2026-70248` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70241.md)
  `CVE-2026-70241` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83909.md)
  `CVE-2026-83909` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70222.md)
  `CVE-2026-70222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70089.md)
  `CVE-2026-70089` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83896.md)
  `CVE-2026-83896` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83879.md)
  `CVE-2026-83879` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83867.md)
  `CVE-2026-83867` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83866.md)
  `CVE-2026-83866` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83876.md)
  `CVE-2026-83876` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83869.md)
  `CVE-2026-83869` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows TCP/IP Local Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83872.md)
  `CVE-2026-83872` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-681
- [Windows Internet (wininet.dll) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-83865.md)
  `CVE-2026-83865` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83864.md)
  `CVE-2026-83864` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Network Load Balancing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83862.md)
  `CVE-2026-83862` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows COM+ Event System Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83848.md)
  `CVE-2026-83848` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Account Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83847.md)
  `CVE-2026-83847` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-83843.md)
  `CVE-2026-83843` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83842.md)
  `CVE-2026-83842` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83838.md)
  `CVE-2026-83838` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83834.md)
  `CVE-2026-83834` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Event Tracing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83836.md)
  `CVE-2026-83836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83833.md)
  `CVE-2026-83833` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Bluetooth Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83827.md)
  `CVE-2026-83827` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Update Stack Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83798.md)
  `CVE-2026-83798` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS, CWE-20
- [Windows DHCP Server Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-83787.md)
  `CVE-2026-83787` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83784.md)
  `CVE-2026-83784` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016-server-core-installation.md?cursor=WyIyMDI2LTEwLTEzVDE4OjU5OjUyLjIwNzAwMFoiLCJDVkUtMjAyNi04Mzc4NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2016-server-core-installation&cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjAyLjI5MTAwMFoiLCJDVkUtMjAyNi04NTMzNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016-server-core-installation/?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjAyLjI5MTAwMFoiLCJDVkUtMjAyNi04NTMzNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.