Microsoft Windows Server 2022 vulnerabilities

CVE-2026-83641 High · 7.8 CWE-122 Oct 13, 2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640 High · 7.8 CWE-122 Oct 13, 2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639 High · 7.8 CWE-122 Oct 13, 2026

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638 High · 7.8 CWE-122 Oct 13, 2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83637 High · 7.8 CWE-125 Oct 13, 2026

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83636 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-83635 High · 7.5 CWE-125 Oct 13, 2026

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83634 High · 7.8 CWE-415 Oct 13, 2026

Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-83588 High · 7.8 CWE-122 Oct 13, 2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 High · 7.8 CWE-822 Oct 13, 2026

Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 High · 7.8 CWE-134 Oct 13, 2026

Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83584 High · 7.0 CWE-416 Oct 13, 2026

Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 High · 7.8 CWE-862 Oct 13, 2026

Windows Geotag Broker Elevation of Privilege Vulnerability

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-83582 Medium · 4.7 CWE-416 Oct 13, 2026

Windows Graphics Kernel Information Disclosure Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-83580 High · 7.0 CWE-122 Oct 13, 2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83579 High · 7.8 CWE-122 Oct 13, 2026

Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83578 Critical · 9.8 CWE-122 Oct 13, 2026

Microsoft PowerShell Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83575 High · 7.0 CWE-416 Oct 13, 2026

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83574 High · 7.0 CWE-416 Oct 13, 2026

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83573 Medium · 6.8 CWE-190 Oct 13, 2026

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-83571 Medium · 5.5 CWE-476 Oct 13, 2026

Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-83570 High · 7.8 CWE-416 Oct 13, 2026

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83569 High · 7.8 CWE-122 Oct 13, 2026

HID Parser Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83567 High · 7.8 CWE-125 Oct 13, 2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83565 Medium · 5.5 CWE-126 Oct 13, 2026

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.