Vulnerabilidades do Microsoft Windows Server 2019

CVE-2026-103576 Média · 6.5 CWE-601 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-103575 Alta · 8.8 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-103569 Alta · 7.5 CWE-125 13/10/2026

Windows IKE Extension Information Disclosure Vulnerability

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

CVE-2026-103568 Alta · 7.8 CWE-122 13/10/2026

Windows Credential Providers Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

CVE-2026-103567 Média · 5.5 CWE-126 13/10/2026

Windows Broadcast DVR User Service Information Disclosure Vulnerability

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-103565 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103560 Média · 5.5 CWE-862 13/10/2026

Role: DNS Server Tampering Vulnerability

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-103558 Alta · 7.5 CWE-833 13/10/2026

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-103555 Alta · 7.0 CWE-122 13/10/2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-103554 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103553 Alta · 7.8 CWE-125 13/10/2026

Windows Partition Management Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102227 Alta · 7.8 CWE-122 13/10/2026

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-102225 Alta · 8.8 CWE-125 13/10/2026

Windows Text Shaping Remote Code Execution Vulnerability

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102221 Média · 4.4 CWE-299 13/10/2026

Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-102220 Alta · 7.8 CWE-416 13/10/2026

Windows VHD miniport driver Elevation of Privilege Vulnerability

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102218 Alta · 7.8 CWE-122 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102217 Alta · 8.8 CWE-41 13/10/2026

WebDAV Elevation of Privilege Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

CVE-2026-102216 Alta · 7.8 CWE-843 13/10/2026

Windows StateRepository API Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-102215 Alta · 7.8 CWE-122 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102214 Alta · 8.8 CWE-416 13/10/2026

Windows Hyper-V Remote Code Execution Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-102211 Alta · 7.0 CWE-362 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-102210 Crítica · 9.8 CWE-122 13/10/2026

Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102208 Alta · 7.0 CWE-416 13/10/2026

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-102207 Alta · 7.0 CWE-362 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-102206 Média · 6.8 CWE-122 13/10/2026

Windows Portable Device MTP Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.