Vulnerabilidades do Microsoft Windows Server 2022
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows Server 2022: 2820 registro(s), com versões afetadas e correções.cpe:2.3:o:microsoft:windows_server_2022
CVE-2026-83704
Alta · 7.8
CWE-59 13/10/2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83703
Média · 6.5
CWE-125 13/10/2026
Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-83702
Alta · 7.0
CWE-416 13/10/2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83701
Alta · 7.0
CWE-416 13/10/2026
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83700
Alta · 7.8
CWE-416 13/10/2026
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83699
Alta · 7.8
CWE-121 13/10/2026
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83698
Alta · 7.8
CWE-122 13/10/2026
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83697
Média · 4.7
CWE-367 13/10/2026
Windows Modern Device Management (MDM) Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-83696
Alta · 7.0
CWE-416 13/10/2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83695
Média · 5.5
CWE-908 13/10/2026
Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-83694
Alta · 7.0
CWE-125 13/10/2026
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83693
Crítica · 9.8
CWE-122 13/10/2026
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83692
Alta · 7.8
CWE-122 13/10/2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83691
Alta · 7.8
CWE-122 13/10/2026
Windows DHCP Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-83690
Alta · 7.8
CWE-416 13/10/2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83689
Alta · 7.0
CWE-416 13/10/2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83688
Alta · 8.8
CWE-122 13/10/2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83686
Média · 5.5
CWE-125 13/10/2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-83685
Média · 6.5
CWE-126 13/10/2026
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
CVE-2026-83683
Média · 6.5
CWE-36 13/10/2026
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
CVE-2026-83682
Alta · 7.0
CWE-416 13/10/2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83680
Alta · 7.0
CWE-122 13/10/2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83678
Alta · 7.8
CWE-122 13/10/2026
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83676
Alta · 7.0
CWE-122 13/10/2026
Windows Installer Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83674
Alta · 8.1
CWE-1390 13/10/2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.