Vulnerabilidades do Microsoft Windows Server 2016

CVE-2026-70247 Alta · 7.8 CWE-125 13/10/2026

HTTP.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

CVE-2026-70245 Alta · 7.8 CWE-843 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70244 Média · 6.5 CWE-125 13/10/2026

Windows DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-70241 Alta · 7.0 CWE-416 13/10/2026

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70238 Alta · 7.8 CWE-122 13/10/2026

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-70237 Alta · 7.0 CWE-416 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70236 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70234 Média · 5.5 CWE-126 13/10/2026

Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-70233 Alta · 7.8 CWE-122 13/10/2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70232 Média · 5.5 CWE-497 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70229 Alta · 8.1 CWE-863 13/10/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70225 Alta · 7.8 CWE-843 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70223 Alta · 7.0 CWE-416 13/10/2026

Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70222 Alta · 7.8 CWE-23 13/10/2026

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70216 Média · 5.5 CWE-1220 13/10/2026

Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-70212 Alta · 7.0 CWE-923 13/10/2026

Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-70211 Média · 5.5 CWE-125 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70210 Alta · 8.8 CWE-122 13/10/2026

Windows OLE DB Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70209 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70208 Média · 5.5 CWE-125 13/10/2026

HTTP.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-70207 Alta · 7.5 CWE-122 13/10/2026

Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

CVE-2026-70205 Alta · 7.0 CWE-843 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70201 Média · 5.5 CWE-125 13/10/2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

CVE-2026-70199 Média · 5.5 CWE-497 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70195 Média · 4.7 CWE-362 13/10/2026

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.