Windows Server Vulnerabilities & Security Advisories
2401 advisories tracked · Microsoft Security Update Guide (MSRC) · 64 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Microsoft Server advisory that VulniPulse classified as Windows Server, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 112 critical, 1675 high, 723 medium, 6 low.
Source
Microsoft Security Update Guide (MSRC)
Polled via the official MSRC Security Update Guide RSS feed (api.msrc.microsoft.com, no credentials required), scoped to SERVER products only — Windows Server, Exchange, SQL Server, SharePoint, Hyper-V and companion server roles. Client-only CVEs (Edge, Office apps, consumer Windows) are filtered out via the monthly CVRF document's affected-product list.
Latest Windows Server advisories
Medium [CVE-2026-108409] Windows Overlay Filter Information Disclosure Vulnerability
Windows Overlay Filter Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-108410] Windows Management Instrumentation Information Disclosure Vulnerability
Windows Management Instrumentation Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-108417] Windows Remote Desktop Client Information Disclosure Vulnerability
Windows Remote Desktop Client Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-108423] Windows WinHTTP Information Disclosure Vulnerability
Windows WinHTTP Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-108424] Windows GDI Information Disclosure Vulnerability
Windows GDI Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112754] Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics Component Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112755] Windows RNDIS Elevation of Privilege Vulnerability
Windows RNDIS Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112757] Windows Secure Kernel Mode Information Disclosure Vulnerability
Windows Secure Kernel Mode Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112789] Windows Installer Information Disclosure Vulnerability
Windows Installer Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2025; Windows Server 2016; Windows Server 2019; Windows Server 2022.
Medium [CVE-2026-112803] Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112807] Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
Medium [CVE-2026-112974] Microsoft Account Tampering Vulnerability
Microsoft Account Tampering Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112975] Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112977] Windows Deployment Services Information Disclosure Vulnerability
Windows Deployment Services Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-112979] Windows State Repository Service Tampering Vulnerability
Windows State Repository Service Tampering Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
Medium [CVE-2026-113754] Windows FileCrypt Driver Information Disclosure Vulnerability
Windows FileCrypt Driver Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113756] Windows FileCrypt Driver Security Feature Bypass Vulnerability
Windows FileCrypt Driver Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113763] Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113764] Windows Projected File System Information Disclosure Vulnerability
Windows Projected File System Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113772] Windows Redirected Drive Buffering Information Disclosure Vulnerability
Windows Redirected Drive Buffering Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113773] Windows DHCP Server Spoofing Vulnerability
Windows DHCP Server Spoofing Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113816] Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113821] Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-113844] Windows NTFS Tampering Vulnerability
Windows NTFS Tampering Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-116697] Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-116700] Windows Telephony Service Elevation of Privilege Vulnerability
Windows Telephony Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022.
Medium [CVE-2026-118140] Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-118214] Windows Advanced Rasterization Platform Information Disclosure Vulnerability
Windows Advanced Rasterization Platform Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-118736] Windows Network File System Information Disclosure Vulnerability
Windows Network File System Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-118739] Windows DHCP Client Denial of Service Vulnerability
Windows DHCP Client Denial of Service Vulnerability Affected product named by the advisory: Windows Server 2025.
Medium [CVE-2026-119385] Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119394] Windows Enhanced Storage Remote Code Execution Vulnerability
Windows Enhanced Storage Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119395] Storport.sys Driver Information Disclosure Vulnerability
Storport.sys Driver Information Disclosure Vulnerability Affected product named by the advisory: Windows Server 2025.
Medium [CVE-2026-119396] Windows Remote Access API Tampering Vulnerability
Windows Remote Access API Tampering Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119404] Windows Client for NFS Security Feature Bypass Vulnerability
Windows Client for NFS Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119823] Windows Storport Miniport Driver Remote Code Execution Vulnerability
Windows Storport Miniport Driver Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119825] Win32k Information Disclosure Vulnerability
Win32k Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119829] Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119830] Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Windows Storport Miniport Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119832] Windows BitLocker Security Feature Bypass Vulnerability
Windows BitLocker Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119836] Windows Management Services Information Disclosure Vulnerability
Windows Management Services Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119838] Windows Installer Information Disclosure Vulnerability
Windows Installer Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
Medium [CVE-2026-119841] Windows Graphics Kernel Information Disclosure Vulnerability
Windows Graphics Kernel Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119855] Windows COM+ Event System Service Information Disclosure Vulnerability
Windows COM+ Event System Service Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119857] Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119867] Windows Installer Security Feature Bypass Vulnerability
Windows Installer Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119869] Windows Failover Cluster Elevation of Privilege Vulnerability
Windows Failover Cluster Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119871] Windows IP Translation Configuration Service Elevation of Privilege Vulnerability
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Medium [CVE-2026-119875] Windows Storport Miniport Driver Information Disclosure Vulnerability
Windows Storport Miniport Driver Information Disclosure Vulnerability Affected product named by the advisory: Windows Server 2025.
Medium [CVE-2026-119882] Windows Remote Desktop Services Information Disclosure Vulnerability
Windows Remote Desktop Services Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2019; Windows Server 2022; Windows Server 2025.
Get an email when Windows Server publishes the next one.
See Windows Server's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Windows Server CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
