Vulnerabilidades do Microsoft Windows Server 2022

CVE-2026-70027 Alta · 7.8 CWE-122 13/10/2026

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-70026 Alta · 7.0 CWE-416 13/10/2026

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025 Média · 6.5 CWE-416 13/10/2026

Windows Netlogon Denial of Service Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70024 Crítica · 9.8 CWE-20 13/10/2026

Windows Internet Information Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70023 Alta · 7.8 CWE-416 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021 Alta · 7.0 CWE-416 13/10/2026

Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70017 Média · 5.5 CWE-843 13/10/2026

Windows Secure Kernel Mode Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-70015 Alta · 7.8 CWE-122 13/10/2026

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70014 Alta · 7.5 CWE-416 13/10/2026

Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-70013 Alta · 8.1 CWE-416 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70011 Média · 5.5 CWE-125 13/10/2026

Windows IP Over USB Service Information Disclosure Vulnerability

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

CVE-2026-70010 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008 Alta · 7.8 CWE-190 13/10/2026

Windows IP Over USB Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70006 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70005 Média · 5.9 CWE-1390 13/10/2026

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70004 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69998 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69997 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69996 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69995 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69994 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69992 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69991 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69988 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.