Login Request a demo
WS
Product
Windows Server 2019 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
6,468
CVEs
159
On KEV
10.0
Max CVSS
922
New 30D
Vulnerabilities6,468In the news12Timeline
Severity mix
Critical 213High 262Medium 25Low 0
Severity
All severities500Critical213High262Medium25Low0
Exploitation
On CISA KEV159Exploited in the wild159
Watch

Add Windows Server 2019 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0785
9.8
50%
Jul 15
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server…
Affected: All versions, or not specified
CVE-2019-0725
9.8
28%
May 16
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution…
Affected: All versions, or not specified
CVE-2019-0786
9.8
7%
Apr 9
An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file…
Affected: All versions, or not specified
CVE-2019-0726
9.8
54%
Apr 9
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code…
Affected: All versions, or not specified
CVE-2019-0698
9.8
63%
Apr 9
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code…
Affected: All versions, or not specified
CVE-2019-0697
9.8
33%
Apr 9
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code…
Affected: All versions, or not specified
CVE-2019-0626
9.8
69%
Mar 5
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code…
Affected: All versions, or not specified
CVE-2018-8626
9.8
21%
Dec 12
A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow…
Affected: All versions, or not specified
CVE-2018-8476
9.8
65%
Nov 14
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote…
Affected: All versions, or not specified
CVE-2026-50380
9.6
1%
Jul 14
Windows GDI+ Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9020
CVE-2021-31962
9.4
4%
Jun 8
Kerberos AppContainer Security Feature Bypass Vulnerability
Affected: All versions, or not specified
CVE-2026-49798
9.3
0%
Jul 14
Windows Kernel Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9020
CVE-2026-96252
9.1
1%
Oct 13
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-45602
9.1
0%
Jun 9
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.8880
CVE-2019-0721
9.1
12%
Nov 12
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating…
Affected: All versions, or not specified
CVE-2019-0719
9.1
11%
Nov 12
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating…
Affected: All versions, or not specified
CVE-2026-105008
9.0
1%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2024-38124
9.0
1%
Oct 8
Windows Netlogon Elevation of Privilege Vulnerability
Affected: before 10.0.17763.6414
CVE-2021-26443
9.0
2%
Nov 10
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-108471
8.8
0%
Oct 13
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-105007
8.8
1%
Oct 13
Windows NDIS Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-103575
8.8
1%
Oct 13
Remote Desktop Client Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-102225
8.8
1%
Oct 13
Windows Text Shaping Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-102217
8.8
1%
Oct 13
WebDAV Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-102214
8.8
0%
Oct 13
Windows Hyper-V Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-102203
8.8
1%
Oct 13
RPC Runtime Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88219
8.8
1%
Oct 13
RPC Runtime Library Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-100220
8.8
1%
Oct 13
Windows Media Video Decoder Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-96952
8.8
1%
Oct 13
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-96917
8.8
0%
Oct 13
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-96914
8.8
0%
Oct 13
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88116
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88114
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88112
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-70250
8.8
0%
Oct 13
Windows DHCP Client Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-70158
8.8
1%
Oct 13
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88142
8.8
1%
Oct 13
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88121
8.8
1%
Oct 13
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-88115
8.8
1%
Oct 13
Windows Server for NFS Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83934
8.8
1%
Oct 13
Windows GDI+ Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83923
8.8
1%
Oct 13
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-85905
8.8
0%
Oct 13
Windows UI Immersive Server API Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-85903
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83889
8.8
1%
Oct 13
Windows DNS Server Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83874
8.8
1%
Oct 13
Windows Event Tracing Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83797
8.8
1%
Oct 13
Windows Partition Management Driver Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83777
8.8
1%
Oct 13
Windows Bluetooth Service Elevation of Privilege Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83778
8.8
1%
Oct 13
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83728
8.8
0%
Oct 13
Windows Hyper-V Spoofing Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-83725
8.8
1%
Oct 13
Microsoft Windows Search Component Remote Code Execution Vulnerability
Affected: 10.0.17763.0 before 10.0.17763.9376
Page 8 of 10 · 500 total
1…78910
The 500 most important CVEs for this product (exploited first, then by severity)