Windows Server Vulnerabilities & Security Advisories
2401 advisories tracked · Microsoft Security Update Guide (MSRC) · 64 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Microsoft Server advisory that VulniPulse classified as Windows Server, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 112 critical, 1675 high, 723 medium, 6 low.
Source
Microsoft Security Update Guide (MSRC)
Polled via the official MSRC Security Update Guide RSS feed (api.msrc.microsoft.com, no credentials required), scoped to SERVER products only — Windows Server, Exchange, SQL Server, SharePoint, Hyper-V and companion server roles. Client-only CVEs (Edge, Office apps, consumer Windows) are filtered out via the monthly CVRF document's affected-product list.
Latest Windows Server advisories
High [CVE-2026-83985] Windows Biometric Service Elevation of Privilege Vulnerability
Windows Biometric Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-72965] Windows WebClient Service Elevation of Privilege Vulnerability
Windows WebClient Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69530] Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-81963] Windows Update Stack Elevation of Privilege Vulnerability
Windows Update Stack Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-81354] Windows Hello Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation).
High [CVE-2026-80096] Windows Remote Desktop Services Elevation of Privilege Vulnerability
Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-78457] Windows Security Health Service Elevation of Privilege Vulnerability
Windows Security Health Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-73017] Graphics Kernel Remote Code Execution Vulnerability
Graphics Kernel Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-73013] Windows Imaging Component Remote Code Execution Vulnerability
Windows Imaging Component Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022.
High [CVE-2026-73006] DirectWrite Remote Code Execution Vulnerability
DirectWrite Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-73012] Windows Management Services Elevation of Privilege Vulnerability
Windows Management Services Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-73024] Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-73005] Windows Authentication Methods Elevation of Privilege Vulnerability
Windows Authentication Methods Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-73014] Data Sharing Service Client Elevation of Privilege Vulnerability
Data Sharing Service Client Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-72987] Windows DNS Remote Code Execution Vulnerability
Windows DNS Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-72989] Windows Failover Cluster Information Disclosure Vulnerability
Windows Failover Cluster Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-69906] Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Windows Secure Kernel Mode Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69575] Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69564] Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69560] Windows Work Folder Service Elevation of Privilege Vulnerability
Windows Work Folder Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2025; Windows Server 2016; Windows Server 2012 R2.
High [CVE-2026-69426] Windows VOLSNAP.SYS Remote Code Execution Vulnerability
Windows VOLSNAP.SYS Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69392] Windows Shell Elevation of Privilege Vulnerability
Windows Shell Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-69311] Windows Audio Service Elevation of Privilege Vulnerability
Windows Audio Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 1 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-72967] Windows Network Connection Broker Elevation of Privilege Vulnerability
Windows Network Connection Broker Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-72953] Windows USB Driver Elevation of Privilege Vulnerability
Windows USB Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-72936] Windows SMB Client Remote Code Execution Vulnerability
Windows SMB Client Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
High [CVE-2026-72928] Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-71352] Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Windows Remote Access Connection Manager Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-70568] Windows Defender Firewall Service Elevation of Privilege Vulnerability
Windows Defender Firewall Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-70567] Windows Display Enhancement Service Elevation of Privilege Vulnerability
Windows Display Enhancement Service Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-70565] Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability
Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69874] Windows ALPC Elevation of Privilege Vulnerability
Windows ALPC Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-69807] PowerShell Elevation of Privilege Vulnerability
PowerShell Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69760] Windows Kerberos Denial of Service Vulnerability
Windows Kerberos Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69891] Windows Media Elevation of Privilege Vulnerability
Windows Media Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69900] Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-69907] Windows Enterprise App Management Elevation of Privilege Vulnerability
Windows Enterprise App Management Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69708] Windows Web Platform Storage Elevation of Privilege Vulnerability
Windows Web Platform Storage Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-69793] Windows TCP/IP Security Feature Bypass Vulnerability
Windows TCP/IP Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69731] HID Class Driver Elevation of Privilege Vulnerability
HID Class Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69814] Windows Credential Providers Elevation of Privilege Vulnerability
Windows Credential Providers Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2025.
High [CVE-2026-69692] Windows Audio Service Elevation of Privilege Vulnerability
Windows Audio Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69816] Windows Accounts Control Elevation of Privilege Vulnerability
Windows Accounts Control Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
High [CVE-2026-69834] Windows ALPC Elevation of Privilege Vulnerability
Windows ALPC Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69707] Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69643] Windows Spaceport.sys Elevation of Privilege Vulnerability
Windows Spaceport.sys Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69817] Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69680] Windows DNS Spoofing Vulnerability
Windows DNS Spoofing Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
High [CVE-2026-69881] Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
High [CVE-2026-69669] Windows Kernel Remote Code Execution Vulnerability
Windows Kernel Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
Get an email when Windows Server publishes the next one.
See Windows Server's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Windows Server CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
