Vulnerabilidades do Microsoft Windows Server 2022

CVE-2026-72968 Alta · 7.0 CWE-416 13/10/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72955 Alta · 7.0 CWE-416 13/10/2026

Windows Application Compatibility Cache Elevation of Privilege Vulnerability

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

CVE-2026-70580 Alta · 8.8 CWE-306 13/10/2026

Windows Credential Guard Spoofing Vulnerability

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

CVE-2026-70566 Alta · 7.8 CWE-476 13/10/2026

Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70303 Alta · 7.8 CWE-787 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70295 Média · 5.5 CWE-125 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70294 Média · 5.5 CWE-20 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70293 Média · 5.5 CWE-908 13/10/2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70292 Média · 5.5 CWE-125 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70288 Média · 5.5 CWE-367 13/10/2026

Win32k Information Disclosure Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70286 Alta · 7.8 CWE-122 13/10/2026

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70285 Alta · 7.8 CWE-122 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70284 Média · 5.5 CWE-908 13/10/2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70278 Alta · 7.8 CWE-122 13/10/2026

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-70277 Média · 5.5 CWE-125 13/10/2026

Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

CVE-2026-70275 Alta · 8.8 CWE-822 13/10/2026

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70272 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70271 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70270 Média · 5.5 CWE-822 13/10/2026

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70262 Alta · 8.8 CWE-122 13/10/2026

WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70261 Média · 5.5 CWE-497 13/10/2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70260 Média · 5.5 CWE-497 13/10/2026

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70258 Alta · 8.8 CWE-122 13/10/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-70255 Alta · 7.8 CWE-122 13/10/2026

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-70253 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.