Microsoft Windows Server 2022 vulnerabilities

CVE-2026-80093 High · 7.0 CWE-416 Sep 8, 2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-80083 High · 8.8 CWE-822 Sep 8, 2026

Windows Hyper-V Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-80075 High · 7.8 CWE-122 Sep 8, 2026

Windows Work Folders Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-78523 High · 7.5 CWE-416 Sep 8, 2026

Windows DNS Server Denial of Service Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-78516 Medium · 4.3 CWE-126 Sep 8, 2026

Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

CVE-2026-78508 Medium · 4.6 CWE-125 Sep 8, 2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78457 High · 7.0 CWE-416 Sep 8, 2026

Windows Security Health Service Elevation of Privilege Vulnerability

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

CVE-2026-78453 Medium · 6.5 CWE-191 Sep 8, 2026

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-78452 Medium · 4.6 CWE-125 Sep 8, 2026

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78451 Medium · 6.8 CWE-822 Sep 8, 2026

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-78450 High · 8.1 CWE-416 Sep 8, 2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-78449 High · 8.1 CWE-416 Sep 8, 2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-78448 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78447 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78445 Critical · 9.8 CWE-416 Sep 8, 2026

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-78444 High · 8.1 CWE-822 Sep 8, 2026

Microsoft Failover Cluster Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-78446 High · 7.5 CWE-416 Sep 8, 2026

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-77905 High · 7.0 CWE-416 Sep 8, 2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-77904 High · 7.8 CWE-122 Sep 8, 2026

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77896 High · 7.5 CWE-190 Sep 8, 2026

Windows Remote Desktop Client Denial of Service Vulnerability

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

CVE-2026-77895 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77894 High · 7.0 CWE-362 Sep 8, 2026

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-77893 High · 7.5 CWE-125 Sep 8, 2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77892 Medium · 6.8 CWE-693 Sep 8, 2026

Windows Boot Manager Elevation of Privilege Vulnerability

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-77891 Medium · 6.4 CWE-125 Sep 8, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.