Windows Server 2019
- Software type
- Operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/18/2026, Windows Server 2019 recorded 643 security vulnerabilities in the last 90 days, of which 490 are rated High or Critical. Notably, 3 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Windows Server 2019 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityCVE-2026-108136Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-108132Windows Kerberos Elevation of Privilege VulnerabilityCVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilityCVE-2026-108129Role: DNS Server Information Disclosure Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108132Windows Kerberos Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-108128Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-108127Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-97844Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-97843Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-97842Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
5,746 Results | Page 1 of 575