windows server

5 articles · newest first

An old beige tower server on the carpet beside an office desk in late afternoon light, with a paper wall calendar pinned on the wall above it

Windows Server 2016 End of Support (Jan 12, 2027): Upgrade, ESU or Move? What Each Path Costs

Windows Server 2016 stops getting free security fixes on January 12, 2027. Three years of extended updates cost $2,999 per 16-core Standard host, a new Windows Server 2025 license costs $1,176, and Azure gives the updates away if you move. Here is every path priced for 1, 2 and 4 servers, from Microsoft's own pages.

0xLax · Oct 2 · 12 min

Networking hardware and cabling, representing the Windows Deployment Services infrastructure affected by CVE-2026-62893

Software

microsoft patched a critical bug in the tool that images every PC in your office — then the fix broke it

CVE-2026-62893 lets an unauthenticated attacker take over any exposed Windows Deployment Services box — and admins who patched it are now watching PXE boot and MDT deployments break instead.

Kernel · Aug 18 · 7 min

Rows of enterprise server racks in a data center, representing Active Directory infrastructure exposed by the Certighost vulnerability

Software

Any employee's login can now become domain admin — and the exploit code is already public

A low-privileged Active Directory account is all it takes to forge a Domain Controller certificate — Microsoft patched it in July, and a working exploit just landed on GitHub.

Kernel · Aug 1 · 6 min

NVD detail for CVE-2026-56188 showing a Windows Server network driver RCE

Software

a 9.8 in a Windows Server network driver lets an attacker run code with nothing but network traffic

CVE-2026-56188 is a race condition in a core Windows Server network driver that an unauthenticated attacker can exploit remotely. It affects every supported Windows Server. Patch it.

Kernel · Jul 30 · 9 min

A dark data center rack full of network cabling

Software

everyone rushed to patch the SharePoint zero-day. the 9.8 sitting on your DHCP server is the one that scares me

CVE-2026-50518 is an unauthenticated remote code execution flaw in Windows DHCP Server — no login, no clicks, network access is the only requirement. It got overshadowed, and Microsoft says exploitation is 'more likely.'

Kernel · Jul 23 · 7 min