Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-83510 Alta · 7.0 CWE-367 13/10/2026

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83509 Alta · 7.0 CWE-426 13/10/2026

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83508 Alta · 7.8 CWE-125 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83507 Média · 5.5 CWE-59 13/10/2026

Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

CVE-2026-83506 Alta · 7.8 CWE-426 13/10/2026

Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83505 Alta · 7.0 CWE-367 13/10/2026

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83500 Média · 6.1 CWE-601 13/10/2026

Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-83499 Alta · 7.8 CWE-1220 13/10/2026

Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81971 Alta · 7.0 CWE-362 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-81969 Alta · 7.8 CWE-1220 13/10/2026

Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81964 Média · 5.5 CWE-798 13/10/2026

Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-78459 Alta · 7.8 CWE-122 13/10/2026

Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-77496 Alta · 8.8 CWE-122 13/10/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73027 Alta · 7.8 CWE-15 13/10/2026

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-72969 Alta · 7.0 CWE-416 13/10/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72968 Alta · 7.0 CWE-416 13/10/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72955 Alta · 7.0 CWE-416 13/10/2026

Windows Application Compatibility Cache Elevation of Privilege Vulnerability

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

CVE-2026-72934 Alta · 7.0 CWE-416 13/10/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70580 Alta · 8.8 CWE-306 13/10/2026

Windows Credential Guard Spoofing Vulnerability

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

CVE-2026-70566 Alta · 7.8 CWE-476 13/10/2026

Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70303 Alta · 7.8 CWE-787 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70299 Alta · 8.8 CWE-863 13/10/2026

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70295 Média · 5.5 CWE-125 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70294 Média · 5.5 CWE-20 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70293 Média · 5.5 CWE-908 13/10/2026

Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.