Microsoft Server Windows Server Vulnerabilities & Security Advisories
1523 advisories tracked · Microsoft Security Update Guide (MSRC) · 61 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Microsoft Server advisory that VulniPulse classified as Windows Server, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 65 critical, 1087 high, 417 medium, 4 low.
Android app · Google Play
Monitor MS Server CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Microsoft Security Update Guide (MSRC)
Polled via the official MSRC Security Update Guide RSS feed (api.msrc.microsoft.com, no credentials required), scoped to SERVER products only — Windows Server, Exchange, SQL Server, SharePoint, Hyper-V and companion server roles. Client-only CVEs (Edge, Office apps, consumer Windows) are filtered out via the monthly CVRF document's affected-product list.
Latest MS Server Windows Server advisories
High [CVE-2026-69389] Windows Storage Management Provider Elevation of Privilege Vulnerability
Windows Storage Management Provider Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69359] Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69347] Windows Fast FAT Driver Remote Code Execution Vulnerability
Windows Fast FAT Driver Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69338] Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Remote Desktop Gateway Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69337] Windows Registry Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69310] Windows DNS Elevation of Privilege Vulnerability
Windows DNS Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 1 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69325] Microsoft JScript Remote Code Execution Vulnerability
Microsoft JScript Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 1 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69281] Windows License Manager Elevation of Privilege Vulnerability
Windows License Manager Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-68893] Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Remote Desktop Licensing Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-68884] Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-68878] Windows Fast FAT Driver Elevation of Privilege Vulnerability
Windows Fast FAT Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-68847] Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-57098] Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. Affected product named by the advisory: Remote Desktop client for Windows Desktop.
High [CVE-2026-62744] Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-58599] HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability Affected products named by the advisory: HEVC Video Extensions from Device Manufacturer on Windows Server 2019; HEVC Video Extensions from Device Manufacturer on Windows Server 2022; HEVC Video Extensions from Device Manufacturer on Windows Server 2025.
High [CVE-2026-58600] HEVC Video Extensions Elevation of Privilege Vulnerability
HEVC Video Extensions Elevation of Privilege Vulnerability Affected products named by the advisory: HEVC Video Extensions from Device Manufacturer on Windows Server 2019; HEVC Video Extensions from Device Manufacturer on Windows Server 2022; HEVC Video Extensions from Device Manufacturer on Windows Server 2025.
High [CVE-2026-80075] Windows Work Folders Elevation of Privilege Vulnerability
Windows Work Folders Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 1 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-71331] Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-56179] Windows Network Address Translation (NAT) Spoofing Vulnerability
Windows Network Address Translation (NAT) Spoofing Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-65796] Windows iSCSI Target Service Remote Code Execution Vulnerability
Windows iSCSI Target Service Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.