Vulnerabilidades do Microsoft Windows Server 2016

CVE-2026-88118 Alta · 7.8 CWE-122 13/10/2026

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88117 Alta · 8.1 CWE-416 13/10/2026

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88116 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88115 Alta · 8.8 CWE-125 13/10/2026

Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88114 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88112 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88101 Alta · 7.8 CWE-1390 13/10/2026

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88098 Alta · 7.0 CWE-822 13/10/2026

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-88096 Alta · 7.0 CWE-362 13/10/2026

Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88091 Alta · 7.8 CWE-502 13/10/2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080 Alta · 7.8 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 Alta · 7.0 CWE-476 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 Alta · 7.8 CWE-125 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87715 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87714 Média · 6.5 CWE-862 13/10/2026

WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-87713 Alta · 7.5 CWE-416 13/10/2026

Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-87712 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-87711 Alta · 7.8 CWE-121 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87710 Alta · 7.0 CWE-362 13/10/2026

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-87708 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87707 Alta · 7.8 CWE-122 13/10/2026

Windows Fax and Scan Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87706 Alta · 7.8 CWE-122 13/10/2026

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-87705 Alta · 7.4 CWE-940 13/10/2026

Windows Hyper-V Security Feature Bypass Vulnerability

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2026-87704 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87702 Alta · 7.8 CWE-190 13/10/2026

Windows Resource Management (MRM) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.