Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-85902 Alta · 7.8 CWE-122 13/10/2026

Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85901 Alta · 7.8 CWE-122 13/10/2026

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-85874 Alta · 7.8 CWE-416 13/10/2026

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

CVE-2026-85872 Alta · 7.8 CWE-416 13/10/2026

Windows Storage VSP Driver Elevation of Privilege Vulnerability

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85871 Alta · 7.8 CWE-122 13/10/2026

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-85870 Alta · 7.0 CWE-122 13/10/2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85869 Alta · 7.8 CWE-122 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-85868 Alta · 7.0 CWE-416 13/10/2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85867 Alta · 7.8 CWE-122 13/10/2026

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85866 Média · 4.7 CWE-497 13/10/2026

Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

CVE-2026-85865 Média · 5.5 CWE-288 13/10/2026

Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-85864 Alta · 7.8 CWE-641 13/10/2026

Python Elevation of Privilege Vulnerability

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

CVE-2026-85863 Alta · 7.8 CWE-416 13/10/2026

Clipboard User Service Elevation of Privilege Vulnerability

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85861 Alta · 7.8 CWE-416 13/10/2026

Clipboard User Service Elevation of Privilege Vulnerability

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85860 Alta · 7.8 CWE-416 13/10/2026

Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85859 Média · 6.5 CWE-476 13/10/2026

Windows Message Queuing Queue Manager Denial of Service Vulnerability

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

CVE-2026-85858 Alta · 7.8 CWE-125 13/10/2026

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-85857 Média · 5.5 CWE-532 13/10/2026

Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-85856 Alta · 7.1 CWE-122 13/10/2026

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

CVE-2026-85855 Alta · 7.0 CWE-416 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85854 Alta · 7.0 CWE-416 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85853 Alta · 7.0 CWE-125 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85852 Média · 5.5 CWE-125 13/10/2026

Windows Management Instrumentation Information Disclosure Vulnerability

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-85851 Alta · 7.8 CWE-416 13/10/2026

Windows SmartScreen Elevation of Privilege Vulnerability

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-85849 Alta · 7.8 CWE-59 13/10/2026

Windows AppX Deployment Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.