HIGH 7.5 Microsoft

CVE-2026-0386

Windows Deployment Services Remote Code Execution Vulnerability

Microsoft Security Update 2026-Jan: Windows Deployment Services Remote Code Execution Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2016

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0386
https://nvd.nist.gov/vuln/detail/CVE-2026-0386

Published: 2026-01-13 · Source: Microsoft · Feed updated: 2026-08-04

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-01-13 via Microsoft. Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.