Microsoft Windows Server 2022 vulnerabilities

CVE-2026-69850 High · 7.8 CWE-822 Oct 13, 2026

Windows Certificates Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-69840 High · 7.0 CWE-416 Oct 13, 2026

Windows Certificates Elevation of Privilege Vulnerability

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-69830 High · 8.1 CWE-362 Oct 13, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69802 High · 8.1 CWE-1390 Oct 13, 2026

Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

CVE-2026-69798 High · 7.8 CWE-416 Oct 13, 2026

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69795 High · 7.0 CWE-476 Oct 13, 2026

Windows Clipboard Server Elevation of Privilege Vulnerability

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

CVE-2026-69789 High · 7.5 CWE-122 Oct 13, 2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-69766 High · 7.0 CWE-362 Oct 13, 2026

Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69763 High · 7.0 CWE-362 Oct 13, 2026

Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69736 High · 7.0 CWE-362 Oct 13, 2026

Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69721 Medium · 5.5 CWE-125 Oct 13, 2026

Windows iSCSI Information Disclosure Vulnerability

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69705 Critical · 9.8 CWE-787 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69675 Medium · 5.5 CWE-125 Oct 13, 2026

Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

CVE-2026-69650 High · 7.8 CWE-347 Oct 13, 2026

Windows Key Distribution Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

CVE-2026-69644 Medium · 5.5 CWE-497 Oct 13, 2026

Windows iSCSI Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69640 Medium · 5.3 CWE-863 Oct 13, 2026

Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

CVE-2026-69639 Critical · 9.8 CWE-122 Oct 13, 2026

Windows libarchive Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69635 Medium · 6.6 CWE-122 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-69634 Critical · 9.8 CWE-122 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69633 High · 7.8 CWE-122 Oct 13, 2026

Windows Update Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69596 High · 7.0 CWE-416 Oct 13, 2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69577 High · 7.5 CWE-125 Oct 13, 2026

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

CVE-2026-69521 High · 8.8 CWE-190 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69506 Medium · 4.7 CWE-125 Oct 13, 2026

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-69471 High · 7.8 CWE-122 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.