Advisories · Technology

Microsoft Windows Server 2019 (Server Core installation).

Every CVE that names Microsoft Windows Server 2019 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-69675 CVE record

CVSS 5.5 Medium

Windows Network File System Information Disclosure Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96926 CVE record

CVSS 5.5 Medium

Role: DNS Server Tampering Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-96929 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96931 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96932 CVE record

CVSS 7.0 High

Windows Embedded Mode Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
Not analysed yet 13 Oct 2026
CVE-2026-96934 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DHCP Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96930 CVE record

CVSS 5.5 Medium

Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96927 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96933 CVE record

CVSS 7.8 High

Windows COM+ Event System Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96924 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96925 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96923 CVE record

CVSS 7.0 High

Windows Workstation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96919 CVE record

CVSS 7.0 High

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96918 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-96917 CVE record

CVSS 8.8 High

Windows PCI Bus Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96914 CVE record

CVSS 8.8 High

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96915 CVE record

CVSS 7.8 High

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96913 CVE record

CVSS 8.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96912 CVE record

CVSS 7.8 High

Windows Client License Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96910 CVE record

CVSS 5.5 Medium

Microsoft Windows Search Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96911 CVE record

CVSS 7.8 High

Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-96916 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96853 CVE record

CVSS 4.7 Medium

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
Not analysed yet 13 Oct 2026
CVE-2026-96852 CVE record

CVSS 7.0 High

Windows TCP/IP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96854 CVE record

CVSS 5.5 Medium

Windows Device Association Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96843 CVE record

CVSS 7.8 High

WebDAV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96847 CVE record

CVSS 7.8 High

WebDAV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96846 CVE record

CVSS 5.5 Medium

WebDAV Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96844 CVE record

CVSS 8.0 High

Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96850 CVE record

CVSS 5.5 Medium

Windows Modern Device Management (MDM) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-170
Not analysed yet 13 Oct 2026
CVE-2026-96325 CVE record

CVSS 7.5 High

Windows SMB Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-771
Not analysed yet 13 Oct 2026
CVE-2026-96324 CVE record

CVSS 7.8 High

Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96322 CVE record

CVSS 7.0 High

Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96320 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DHCP Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96300 CVE record

CVSS 5.9 Medium

RPC Endpoint Mapper Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-96252 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Active Directory Federation Services (AD FS) Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Weak cryptography or TLS
Not analysed yet 13 Oct 2026
CVE-2026-96243 CVE record

CVSS 7.8 High

Windows WalletService Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-96186 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Insecure deserialization
Not analysed yet 13 Oct 2026
CVE-2026-70153 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-69802 CVE record

CVSS 8.1 High

Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Authentication bypass
Not analysed yet 13 Oct 2026
CVE-2026-88130 CVE record

CVSS 6.5 Medium

Role: DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88129 CVE record

CVSS 6.5 Medium

Role: DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88125 CVE record

CVSS 6.5 Medium

Role: DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88123 CVE record

CVSS 6.5 Medium

Role: DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88122 CVE record

CVSS 6.5 Medium

Role: DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88120 CVE record

CVSS 8.1 High

Windows DHCP Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88119 CVE record

CVSS 8.1 High

Windows DHCP Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88117 CVE record

CVSS 8.1 High

Windows DHCP Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88116 CVE record

CVSS 8.8 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88114 CVE record

CVSS 8.8 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88112 CVE record

CVSS 8.8 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88093 CVE record

CVSS 7.8 High

Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70261 CVE record

CVSS 5.5 Medium

Microsoft Trace Data Helper Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
Not analysed yet 13 Oct 2026
CVE-2026-70260 CVE record

CVSS 5.5 Medium

Microsoft Trace Data Helper Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
Not analysed yet 13 Oct 2026
CVE-2026-70250 CVE record

CVSS 8.8 High

Windows DHCP Client Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Race condition
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70229 CVE record

CVSS 8.1 High

Windows Active Directory Domain Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-70228 CVE record

CVSS 7.8 High

Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70111 CVE record

CVSS 8.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70160 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70158 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Oct 2026