# Microsoft Windows Server 2016.

Every CVE that names Microsoft Windows Server 2016 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102218.md)
  `CVE-2026-102218` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows StateRepository API Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102216.md)
  `CVE-2026-102216` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102211.md)
  `CVE-2026-102211` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102208.md)
  `CVE-2026-102208` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102207.md)
  `CVE-2026-102207` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102205.md)
  `CVE-2026-102205` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Portable Device MTP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102206.md)
  `CVE-2026-102206` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [RPC Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102203.md)
  `CVE-2026-102203` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Codecs Library Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-102199.md)
  `CVE-2026-102199` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-102198.md)
  `CVE-2026-102198` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102194.md)
  `CVE-2026-102194` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102188.md)
  `CVE-2026-102188` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Network File System Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-102186.md)
  `CVE-2026-102186` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-102187.md)
  `CVE-2026-102187` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Network File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96209.md)
  `CVE-2026-96209` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Port Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-88226.md)
  `CVE-2026-88226` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Security Center Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70212.md)
  `CVE-2026-70212` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-923
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-100225.md)
  `CVE-2026-100225` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100222.md)
  `CVE-2026-100222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Key Storage Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69506.md)
  `CVE-2026-69506` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [RPC Runtime Library Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88219.md)
  `CVE-2026-88219` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Media Video Decoder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100220.md)
  `CVE-2026-100220` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Desktop Gateway Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100218.md)
  `CVE-2026-100218` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Group Policy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-100217.md)
  `CVE-2026-100217` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Update Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-100203.md)
  `CVE-2026-100203` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100202.md)
  `CVE-2026-100202` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96118.md)
  `CVE-2026-96118` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96071.md)
  `CVE-2026-96071` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96953.md)
  `CVE-2026-96953` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Shell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-96951.md)
  `CVE-2026-96951` · CVE record: Microsoft Microsoft Edge (Chromium-based) and 4 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96950.md)
  `CVE-2026-96950` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96949.md)
  `CVE-2026-96949` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96948.md)
  `CVE-2026-96948` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96947.md)
  `CVE-2026-96947` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96946.md)
  `CVE-2026-96946` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Distributed File System (DFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96938.md)
  `CVE-2026-96938` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Network File System Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69675.md)
  `CVE-2026-69675` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-96926.md)
  `CVE-2026-96926` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96929.md)
  `CVE-2026-96929` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96931.md)
  `CVE-2026-96931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Embedded Mode Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96932.md)
  `CVE-2026-96932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96934.md)
  `CVE-2026-96934` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96930.md)
  `CVE-2026-96930` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96927.md)
  `CVE-2026-96927` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows COM+ Event System Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96933.md)
  `CVE-2026-96933` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows OLE Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96924.md)
  `CVE-2026-96924` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96925.md)
  `CVE-2026-96925` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Workstation Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96923.md)
  `CVE-2026-96923` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96918.md)
  `CVE-2026-96918` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96914.md)
  `CVE-2026-96914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96915.md)
  `CVE-2026-96915` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Search Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96910.md)
  `CVE-2026-96910` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96911.md)
  `CVE-2026-96911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96916.md)
  `CVE-2026-96916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96853.md)
  `CVE-2026-96853` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96852.md)
  `CVE-2026-96852` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96854.md)
  `CVE-2026-96854` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96843.md)
  `CVE-2026-96843` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96847.md)
  `CVE-2026-96847` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96846.md)
  `CVE-2026-96846` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016.md?cursor=WyIyMDI2LTEwLTEzVDE5OjAxOjE4LjQ5MTAwMFoiLCJDVkUtMjAyNi05Njg0NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2016&cursor=WyIyMDI2LTEwLTEzVDE5OjAxOjM0LjY3OTAwMFoiLCJDVkUtMjAyNi0xMDIyMTUiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2016/?cursor=WyIyMDI2LTEwLTEzVDE5OjAxOjM0LjY3OTAwMFoiLCJDVkUtMjAyNi0xMDIyMTUiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.