Vulnerabilidades do Microsoft Windows Server 2012 (Server Core installation)

CVE-2026-102220 Alta · 7.8 CWE-416 13/10/2026

Windows VHD miniport driver Elevation of Privilege Vulnerability

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102218 Alta · 7.8 CWE-122 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102217 Alta · 8.8 CWE-41 13/10/2026

WebDAV Elevation of Privilege Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

CVE-2026-102216 Alta · 7.8 CWE-843 13/10/2026

Windows StateRepository API Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-102215 Alta · 7.8 CWE-122 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102208 Alta · 7.0 CWE-416 13/10/2026

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-102206 Média · 6.8 CWE-122 13/10/2026

Windows Portable Device MTP Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-102205 Alta · 7.8 CWE-122 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102203 Alta · 8.8 CWE-843 13/10/2026

RPC Runtime Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-102199 Média · 6.5 CWE-121 13/10/2026

Microsoft Windows Codecs Library Denial of Service Vulnerability

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

CVE-2026-102198 Média · 5.3 CWE-125 13/10/2026

Windows Remote Desktop Protocol Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

CVE-2026-102194 Alta · 7.0 CWE-416 13/10/2026

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-102188 Média · 6.8 CWE-822 13/10/2026

Windows Storage Port Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-102187 Média · 5.5 CWE-908 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-102186 Média · 4.7 CWE-822 13/10/2026

Windows Network File System Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

CVE-2026-100225 Alta · 7.0 CWE-122 13/10/2026

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-100222 Crítica · 9.8 CWE-122 13/10/2026

Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-100220 Alta · 8.8 CWE-122 13/10/2026

Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

CVE-2026-100218 Alta · 8.1 CWE-416 13/10/2026

Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-100202 Crítica · 9.8 CWE-416 13/10/2026

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

CVE-2026-85880 Alta · 7.8 KEV Alta · 54 CWE-122 08/09/2026

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-85360 Alta · 7.0 CWE-416 08/09/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-84001 Alta · 7.5 CWE-125 08/09/2026

Windows Key Distribution Center Denial of Service Vulnerability

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

CVE-2026-84000 Alta · 7.8 CWE-122 08/09/2026

Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

CVE-2026-83996 Alta · 8.8 CWE-122 08/09/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.