Microsoft: >> Windows Server 2016 >> 10.0.14393.9339 Security Vulnerabilities
CVE-2026-85880
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Known exploited
CVSS Score
7.8
Published
2026-09-08
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-08-19
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-08-11
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-08-11
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-08-11
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-08-11
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS Score
6.7
EPSS Score
0.003
Published
2026-08-11
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-08-11
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS Score
6.7
EPSS Score
0.003
Published
2026-08-11
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVSS Score
5.9
EPSS Score
0.007
Published
2026-08-11
Page 1