Windows Server 2016

A new vulnerability, EUVD-2026-99172, has been catalogued affecting Microsoft Windows, including Windows Server 2016, Windows Server 2022 and Windows 11 24H2, among other versions. The flaw is a heap-based buffer overflow in the Windows Portable Device File System Driver, scored 7.8 out of 10 under CVSS v3.1. The advisory was updated on 13 October 2026, and system administrators are expected to review patching guidance for affected deployments.

A new vulnerability, tracked as EUVD-2026-99175, has been catalogued affecting Microsoft's Windows Remote POS Driver. The flaw, an out-of-bounds read with a CVSS v3.1 score of 5.5, impacts Windows 11 Version 23H2, Windows Server 2016 Server Core, Windows Server 2025 and additional Microsoft products. An authorized attacker could exploit it to read data outside intended memory boundaries. The entry was updated on 13 October 2026.

A critical vulnerability, EUVD-2026-100399, has been catalogued affecting Microsoft Windows, including Windows Server 2016 Server Core, Windows 10 Version 1809 and Windows 11 Version 25H2, among more than 15 other versions. The flaw is a use-after-free bug in the Windows Search component, rated 9.8 out of 10 on the CVSS v3.1 scale. The vulnerability was updated in the EU vulnerability database on 13 October 2026, and security teams are urged to patch affected systems.

A medium-severity vulnerability affecting Microsoft Windows Server editions has been catalogued as EUVD-2026-73019, with a CVSS v3.1 score of 5.5 out of 10. The flaw involves missing authentication for a critical function, affecting Windows Server 2025, Windows Server 2016 (Server Core installation), Windows Server 2012 and more than sixteen other configurations. The entry was published on 8 September 2026 and updated on 7 October 2026. Administrators are advised to check whether patches are available for affected builds.