Vulnerabilidades do Microsoft Windows Server 2012

CVE-2026-69949 Alta · 7.8 CWE-122 13/10/2026

Windows Client for NFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69940 Média · 6.5 CWE-125 13/10/2026

Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69916 Alta · 7.8 CWE-190 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69913 Alta · 8.1 CWE-416 13/10/2026

Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-69909 Alta · 7.8 CWE-122 13/10/2026

Microsoft COM for Windows Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-69902 Média · 6.7 CWE-822 13/10/2026

Windows NTFS Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69886 Crítica · 9.8 CWE-122 13/10/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69884 Alta · 7.8 CWE-126 13/10/2026

Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-69883 Crítica · 9.8 CWE-416 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69830 Alta · 8.1 CWE-362 13/10/2026

Windows DHCP Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69802 Alta · 8.1 CWE-1390 13/10/2026

Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

CVE-2026-69798 Alta · 7.8 CWE-416 13/10/2026

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69789 Alta · 7.5 CWE-122 13/10/2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-69736 Alta · 7.0 CWE-362 13/10/2026

Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69721 Média · 5.5 CWE-125 13/10/2026

Windows iSCSI Information Disclosure Vulnerability

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69705 Crítica · 9.8 CWE-787 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69675 Média · 5.5 CWE-125 13/10/2026

Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

CVE-2026-69650 Alta · 7.8 CWE-347 13/10/2026

Windows Key Distribution Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

CVE-2026-69644 Média · 5.5 CWE-497 13/10/2026

Windows iSCSI Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69640 Média · 5.3 CWE-863 13/10/2026

Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

CVE-2026-69635 Média · 6.6 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-69634 Crítica · 9.8 CWE-122 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69521 Alta · 8.8 CWE-190 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69471 Alta · 7.8 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69452 Alta · 7.1 CWE-416 13/10/2026

Windows Enterprise App Management Elevation of Privilege Vulnerability

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.