Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) vulnerabilities

CVE-2026-42825 High · 7.0 CWE-416 May 12, 2026

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-41097 Medium · 6.7 CWE-1329 May 12, 2026

Secure Boot Security Feature Bypass Vulnerability

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-41096 Critical · 9.8 CWE-122 May 12, 2026

Windows DNS Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-41095 High · 7.8 CWE-416 May 12, 2026

Data Deduplication Elevation of Privilege Vulnerability

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

CVE-2026-41089 Critical · 9.8 CWE-121 May 12, 2026

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CVE-2026-41088 High · 7.8 CWE-73 May 12, 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-40415 High · 8.1 CWE-416 May 12, 2026

Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-40414 High · 7.4 CWE-476 May 12, 2026

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40413 High · 7.4 CWE-476 May 12, 2026

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40410 High · 7.0 CWE-416 May 12, 2026

Windows SMB Client Elevation of Privilege Vulnerability

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

CVE-2026-40408 High · 7.8 CWE-416 May 12, 2026

Windows WAN ARP Driver Elevation of Privilege Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-40407 High · 7.8 CWE-122 May 12, 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40406 High · 7.5 CWE-416 May 12, 2026

Windows TCP/IP Information Disclosure Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

CVE-2026-40403 High · 8.8 CWE-122 May 12, 2026

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

CVE-2026-40401 High · 7.1 CWE-476 May 12, 2026

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40399 High · 7.8 CWE-121 May 12, 2026

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-40398 High · 7.8 CWE-122 May 12, 2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CVE-2026-40397 High · 7.8 CWE-191 May 12, 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40382 High · 7.8 CWE-416 May 12, 2026

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-40380 Medium · 6.2 CWE-122 May 12, 2026

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.

CVE-2026-40377 High · 7.8 CWE-122 May 12, 2026

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-35424 High · 7.5 CWE-401 May 12, 2026

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-35423 Medium · 5.4 CWE-125 May 12, 2026

Windows 11 Telnet Client Information Disclosure Vulnerability

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-35422 Medium · 6.5 CWE-288 May 12, 2026

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.

CVE-2026-35421 High · 7.8 CWE-122 May 12, 2026

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.