Microsoft Windows Server 2022 vulnerabilities

CVE-2026-69987 High · 7.5 CWE-416 Oct 13, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69986 High · 7.5 CWE-416 Oct 13, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69985 High · 8.8 CWE-122 Oct 13, 2026

Windows libarchive Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69984 High · 7.5 CWE-416 Oct 13, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69982 Medium · 5.9 CWE-1390 Oct 13, 2026

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69979 Medium · 5.5 CWE-424 Oct 13, 2026

Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-69978 Medium · 5.6 CWE-476 Oct 13, 2026

Microsoft Windows VMSwitch Denial of Service Vulnerability

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69977 High · 7.0 CWE-416 Oct 13, 2026

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-69976 High · 7.5 CWE-416 Oct 13, 2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69974 Medium · 4.7 CWE-125 Oct 13, 2026

Desktop Window Manager Information Disclosure Vulnerability

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-69973 Medium · 6.5 CWE-22 Oct 13, 2026

Windows libarchive Tampering Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69970 High · 7.0 CWE-122 Oct 13, 2026

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69969 Medium · 4.7 CWE-59 Oct 13, 2026

Windows AppX Deployment Service Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69968 Medium · 6.5 CWE-23 Oct 13, 2026

Windows libarchive Tampering Vulnerability

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69967 Medium · 5.5 CWE-125 Oct 13, 2026

Windows Overlay Filter Information Disclosure Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69966 High · 7.8 CWE-190 Oct 13, 2026

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964 High · 7.0 CWE-416 Oct 13, 2026

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69963 High · 7.8 CWE-122 Oct 13, 2026

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69959 High · 7.8 CWE-125 Oct 13, 2026

Windows Overlay Filter Remote Code Execution Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69958 Medium · 6.8 CWE-122 Oct 13, 2026

Windows Overlay Filter Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69957 High · 7.8 CWE-126 Oct 13, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69955 Medium · 6.5 CWE-125 Oct 13, 2026

Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69954 Medium · 5.5 CWE-126 Oct 13, 2026

Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69953 High · 7.8 CWE-126 Oct 13, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69952 High · 7.8 CWE-125 Oct 13, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.