What’s Vulnerable › Products

Microsoft Windows Server 2019 vulnerabilities

6467 known vulnerabilities, 159 confirmed exploited in the wild (CISA KEV), 2468 published in the last 12 months.

Check whether your Microsoft Windows Server 2019 version is affected

Exploited Microsoft Windows Server 2019 vulnerabilities

• CVE-2026-96951 — Windows Shell Security Feature Bypass Vulnerability
• CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
• CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
• CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability
• CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability
• CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability
• CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability
• CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability
• CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Latest Microsoft Windows Server 2019 vulnerabilities

• CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97843 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97842 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97841 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97840 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97839 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97838 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97837 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97836 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97835 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97834 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97833 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97832 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97831 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97829 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97828 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97827 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97826 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97825 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97824 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97823 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97822 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97821 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97820 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97819 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)