Vulnerabilidades do Microsoft Windows Server 2022

CVE-2026-88115 Alta · 8.8 CWE-125 13/10/2026

Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88114 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88112 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88107 Alta · 7.0 CWE-362 13/10/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88106 Alta · 7.0 CWE-416 13/10/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88102 Crítica · 9.8 CWE-416 13/10/2026

Microsoft Failover Cluster Remote Code Execution Vulnerability

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-88101 Alta · 7.8 CWE-1390 13/10/2026

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88099 Média · 5.9 CWE-248 13/10/2026

Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-88098 Alta · 7.0 CWE-822 13/10/2026

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-88096 Alta · 7.0 CWE-362 13/10/2026

Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 Alta · 7.8 CWE-122 13/10/2026

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88091 Alta · 7.8 CWE-502 13/10/2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080 Alta · 7.8 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 Alta · 7.0 CWE-476 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88072 Alta · 7.8 CWE-59 13/10/2026

Windows Host Guardian Service Elevation of Privilege Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88071 Alta · 7.8 CWE-415 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 Alta · 7.8 CWE-125 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87716 Alta · 7.5 CWE-122 13/10/2026

Windows Storage Spaces Controller Denial of Service Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

CVE-2026-87715 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87714 Média · 6.5 CWE-862 13/10/2026

WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-87713 Alta · 7.5 CWE-416 13/10/2026

Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-87712 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-87711 Alta · 7.8 CWE-121 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87710 Alta · 7.0 CWE-362 13/10/2026

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-87709 Média · 5.5 CWE-250 13/10/2026

Windows Host Guardian Service Tampering Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.