Vulnerabilidades do Microsoft Windows Server 2022

CVE-2026-70112 Alta · 7.8 CWE-122 13/10/2026

Windows Spaceport.sys Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-70111 Alta · 8.1 CWE-822 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70110 Alta · 7.8 CWE-121 13/10/2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70109 Alta · 7.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70108 Alta · 7.8 CWE-122 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 Alta · 7.8 CWE-122 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104 Alta · 7.8 CWE-822 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70103 Alta · 7.8 CWE-122 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70102 Alta · 7.8 CWE-416 13/10/2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70097 Média · 5.6 CWE-362 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

CVE-2026-70096 Crítica · 9.8 CWE-122 13/10/2026

Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70095 Alta · 7.5 CWE-122 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093 Alta · 7.8 CWE-122 13/10/2026

Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092 Alta · 7.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70090 Média · 5.5 CWE-908 13/10/2026

Windows Netlogon Information Disclosure Vulnerability

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

CVE-2026-70089 Alta · 8.8 CWE-122 13/10/2026

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70087 Média · 5.5 CWE-863 13/10/2026

Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70086 Alta · 7.0 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70085 Média · 5.5 CWE-862 13/10/2026

Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70084 Média · 5.5 CWE-22 13/10/2026

Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-70083 Média · 5.5 CWE-863 13/10/2026

Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70082 Alta · 7.5 CWE-248 13/10/2026

Windows DNS Denial of Service Vulnerability

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70079 Alta · 7.5 CWE-841 13/10/2026

Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70077 Média · 4.7 CWE-416 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70075 Média · 4.4 CWE-367 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.