Windows Server Vulnerabilities & Security Advisories
2401 advisories tracked · Microsoft Security Update Guide (MSRC) · 64 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Microsoft Server advisory that VulniPulse classified as Windows Server, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 112 critical, 1675 high, 723 medium, 6 low.
Source
Microsoft Security Update Guide (MSRC)
Polled via the official MSRC Security Update Guide RSS feed (api.msrc.microsoft.com, no credentials required), scoped to SERVER products only — Windows Server, Exchange, SQL Server, SharePoint, Hyper-V and companion server roles. Client-only CVEs (Edge, Office apps, consumer Windows) are filtered out via the monthly CVRF document's affected-product list.
Latest Windows Server advisories
High [CVE-2026-105578] Microsoft JScript Remote Code Execution Vulnerability
Microsoft JScript Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-105579] Windows DNS Information Disclosure Vulnerability
Windows DNS Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-105580] Windows Management Instrumentation Remote Code Execution Vulnerability
Windows Management Instrumentation Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2025; Windows Server 2016; Windows Server 2019; Windows Server 2022.
High [CVE-2026-105581] Desktop Window Manager Elevation of Privilege Vulnerability
Desktop Window Manager Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-105586] Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2025; Windows Server 2016; Windows Server 2019; Windows Server 2022.
High [CVE-2026-105587] Windows OLE DB Elevation of Privilege Vulnerability
Windows OLE DB Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-105589] Windows Wireless Networking Elevation of Privilege Vulnerability
Windows Wireless Networking Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108401] Remote Desktop Services Remote Code Execution Vulnerability
Remote Desktop Services Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108405] Windows CD-ROM Driver Elevation of Privilege Vulnerability
Windows CD-ROM Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108406] Windows Network Connection Broker Elevation of Privilege Vulnerability
Windows Network Connection Broker Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-108407] Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108411] Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108412] Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108413] Windows Telephony Service Elevation of Privilege Vulnerability
Windows Telephony Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108414] Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-108421] Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Windows File Server Resource Management Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-109459] Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-109463] Windows DNS Remote Code Execution Vulnerability
Windows DNS Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server 2019; and 2 more. Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-112727] Windows Domain Name Service Remote Code Execution Vulnerability
Windows Domain Name Service Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-112743] Windows Device Association Service Elevation of Privilege Vulnerability
Windows Device Association Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112751] Windows Remote Assistance Elevation of Privilege Vulnerability
Windows Remote Assistance Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112752] Windows Print Spooler Components Elevation of Privilege Vulnerability
Windows Print Spooler Components Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112756] Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112758] Windows Defender Firewall Service Elevation of Privilege Vulnerability
Windows Defender Firewall Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112759] Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112760] Windows Overlay Filter Elevation of Privilege Vulnerability
Windows Overlay Filter Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112764] Windows USB Driver Elevation of Privilege Vulnerability
Windows USB Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112766] Windows exFAT File System Elevation of Privilege Vulnerability
Windows exFAT File System Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112793] Windows Event Collector Service Elevation of Privilege Vulnerability
Windows Event Collector Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112794] Windows Smart Card Elevation of Privilege Vulnerability
Windows Smart Card Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112796] Windows Event Collector Service Elevation of Privilege Vulnerability
Windows Event Collector Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-112799] Windows Projected File System Elevation of Privilege Vulnerability
Windows Projected File System Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112801] Windows eSCL Scanner Elevation of Privilege Vulnerability
Windows eSCL Scanner Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2025; Windows Server 2022.
High [CVE-2026-112802] Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112804] Windows exFAT File System Elevation of Privilege Vulnerability
Windows exFAT File System Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112812] Windows SMB Client Elevation of Privilege Vulnerability
Windows SMB Client Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112966] Windows Security Account Manager Denial of Service Vulnerability
Windows Security Account Manager Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-112972] Windows SMBv3 Server Remote Code Execution Vulnerability
Windows SMBv3 Server Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112973] Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112985] Windows JScript Remote Code Execution Vulnerability
Windows JScript Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112987] Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-112989] Windows Servicing Stack Updates Elevation of Privilege Vulnerability
Windows Servicing Stack Updates Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-113748] Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Software Protection Platform (SPP) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113749] Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Microsoft Windows Codecs Library Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113750] Windows Device Inventory Elevation of Privilege Vulnerability
Windows Device Inventory Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113751] Windows Fast FAT Driver Elevation of Privilege Vulnerability
Windows Fast FAT Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113752] Windows Print Spooler Components Remote Code Execution Vulnerability
Windows Print Spooler Components Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113755] Windows Filter Manager Elevation of Privilege Vulnerability
Windows Filter Manager Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113758] Windows Desktop Window Manager Elevation of Privilege Vulnerability
Windows Desktop Window Manager Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-113760] Windows XWizard Framework Elevation of Privilege Vulnerability
Windows XWizard Framework Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Get an email when Windows Server publishes the next one.
See Windows Server's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Windows Server CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
