Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-83747 Média · 5.5 CWE-125 13/10/2026

Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83741 Alta · 7.8 CWE-416 13/10/2026

Internet Explorer Elevation of Privilege Vulnerability

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

CVE-2026-83740 Alta · 7.0 CWE-416 13/10/2026

Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83739 Alta · 7.5 CWE-416 13/10/2026

Windows Bluetooth Service Remote Code Execution Vulnerability

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-83738 Alta · 7.0 CWE-362 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-83737 Média · 5.5 CWE-125 13/10/2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83736 Média · 5.5 CWE-122 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83735 Alta · 7.8 CWE-763 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83733 Média · 5.5 CWE-125 13/10/2026

Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-83732 Alta · 7.8 CWE-416 13/10/2026

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83728 Alta · 8.8 CWE-1286 13/10/2026

Windows Hyper-V Spoofing Vulnerability

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

CVE-2026-83727 Alta · 7.8 CWE-126 13/10/2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83726 Alta · 7.8 CWE-416 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83725 Alta · 8.8 CWE-122 13/10/2026

Microsoft Windows Search Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-83724 Alta · 7.0 CWE-122 13/10/2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-83723 Média · 5.5 CWE-908 13/10/2026

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-83722 Alta · 7.0 CWE-362 13/10/2026

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-83721 Alta · 7.8 CWE-416 13/10/2026

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83719 Média · 5.5 CWE-126 13/10/2026

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

CVE-2026-83718 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83717 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83716 Alta · 8.8 CWE-122 13/10/2026

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83715 Alta · 7.1 CWE-306 13/10/2026

Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVE-2026-83714 Média · 5.5 CWE-908 13/10/2026

HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83713 Média · 5.5 CWE-497 13/10/2026

Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.