Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-83686 Média · 5.5 CWE-125 13/10/2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-83685 Média · 6.5 CWE-126 13/10/2026

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

CVE-2026-83683 Média · 6.5 CWE-36 13/10/2026

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

CVE-2026-83682 Alta · 7.0 CWE-416 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83680 Alta · 7.0 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83679 Alta · 7.8 CWE-416 13/10/2026

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83678 Alta · 7.8 CWE-122 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83677 Alta · 7.5 CWE-401 13/10/2026

Windows DHCP Client Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

CVE-2026-83676 Alta · 7.0 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83675 Alta · 7.0 CWE-416 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83674 Alta · 8.1 CWE-1390 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83672 Média · 4.7 CWE-497 13/10/2026

Windows Installer Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-83671 Média · 6.5 CWE-125 13/10/2026

Windows Hyper-V Information Disclosure Vulnerability

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-83670 Alta · 7.5 CWE-125 13/10/2026

Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

CVE-2026-83669 Alta · 7.8 CWE-908 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83668 Média · 5.5 CWE-125 13/10/2026

Windows WLAN Service Information Disclosure Vulnerability

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

CVE-2026-83667 Média · 6.5 CWE-125 13/10/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83666 Alta · 7.0 CWE-362 13/10/2026

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83665 Alta · 7.5 CWE-476 13/10/2026

Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83664 Média · 5.5 CWE-843 13/10/2026

Windows Portable Device File System Driver Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-83659 Alta · 7.8 CWE-59 13/10/2026

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83658 Média · 5.5 CWE-862 13/10/2026

Windows Error Reporting Information Disclosure Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83656 Média · 4.7 CWE-306 13/10/2026

Windows Modern Device Management (MDM) Tampering Vulnerability

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-83655 Alta · 7.5 CWE-125 13/10/2026

Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83654 Alta · 7.8 CWE-306 13/10/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.