Vulnerabilidades do Microsoft Windows Server 2016 (Server Core installation)

CVE-2026-69572 Média · 5.7 CWE-125 08/09/2026

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.

CVE-2026-69571 Alta · 7.8 CWE-122 08/09/2026

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69569 Média · 5.7 CWE-822 08/09/2026

Windows Print Spooler Components Denial of Service Vulnerability

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.

CVE-2026-69568 Média · 5.5 CWE-125 08/09/2026

Storage Spaces Controller Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

CVE-2026-69567 Alta · 7.0 CWE-416 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69566 Média · 6.8 CWE-122 08/09/2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69564 Alta · 7.0 CWE-122 08/09/2026

Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.

CVE-2026-69563 Alta · 7.0 CWE-122 08/09/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69561 Alta · 7.8 CWE-125 08/09/2026

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69560 Alta · 7.0 CWE-416 08/09/2026

Windows Work Folder Service Elevation of Privilege Vulnerability

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69554 Média · 5.5 CWE-306 08/09/2026

Microsoft Windows Search Component Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

CVE-2026-69552 Média · 5.7 CWE-209 08/09/2026

Windows Print Spooler Components Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

CVE-2026-69551 Alta · 8.8 CWE-416 08/09/2026

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-69548 Média · 4.6 CWE-122 08/09/2026

Windows RNDIS Information Disclosure Vulnerability

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69547 Alta · 8.8 CWE-122 08/09/2026

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-69546 Alta · 8.1 CWE-416 08/09/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69541 Alta · 7.8 CWE-122 08/09/2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69539 Alta · 7.5 CWE-416 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69538 Alta · 7.8 CWE-125 08/09/2026

Windows Spaceport.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-69534 Alta · 7.8 CWE-77 08/09/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69532 Alta · 7.8 CWE-125 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69531 Média · 5.5 CWE-441 08/09/2026

Microsoft Windows Speech Tampering Vulnerability

Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

CVE-2026-69527 Média · 5.5 CWE-125 08/09/2026

Windows USB Mass Storage Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

CVE-2026-69525 Crítica · 9.8 CWE-416 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69524 Alta · 8.1 CWE-416 08/09/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.