Windows Server 2019 (Server Core installation) vulnerabilities

Product

Windows Server 2019 (Server Core installation)

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wildRansomware-linked

6,475

CVEs

159

On KEV

10.0

Max CVSS

922

New 30D

Vulnerabilities6,475 In the news12 Timeline

Severity mix

Critical 213High 262Medium 25Low 0

Severity

All severities500 Critical213 High262 Medium25 Low0

Exploitation

On CISA KEV159 Exploited in the wild159

Watch

Add Windows Server 2019 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0626	9.8	69%	Mar 5	A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: All versions, or not specified
CVE-2018-8626	9.8	21%	Dec 12	A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow… Affected: All versions, or not specified
CVE-2018-8476	9.8	65%	Nov 14	A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote… Affected: All versions, or not specified
CVE-2026-50380	9.6	1%	Jul 14	Windows GDI+ Remote Code Execution Vulnerability Affected: 10.0.17763.0 before 10.0.17763.9020
CVE-2021-31962	9.4	4%	Jun 8	Kerberos AppContainer Security Feature Bypass Vulnerability Affected: All versions, or not specified
CVE-2026-49798	9.3	0%	Jul 14	Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.17763.0 before 10.0.17763.9020
CVE-2026-96252	9.1	1%	Oct 13	Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2026-45602	9.1	0%	Jun 9	Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Affected: 10.0.17763.0 before 10.0.17763.8880
CVE-2019-0721	9.1	12%	Nov 12	A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: All versions, or not specified
CVE-2019-0719	9.1	11%	Nov 12	A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: All versions, or not specified
CVE-2026-105008	9.0	1%	Oct 13	Windows Schannel Spoofing Vulnerability Affected: 10.0.17763.0 before 10.0.17763.9376
CVE-2024-38124	9.0	1%	Oct 8	Windows Netlogon Elevation of Privilege Vulnerability Affected: 10.0.17763.0 before 10.0.17763.6414
CVE-2021-26443	9.0	2%	Nov 10	Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability Affected: All versions, or not specified