Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-77504 Alta · 8.8 CWE-415 08/09/2026

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77503 Alta · 7.8 CWE-125 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2026-77502 Alta · 7.5 CWE-125 08/09/2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77501 Alta · 7.5 CWE-125 08/09/2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77499 Alta · 7.5 CWE-843 08/09/2026

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77498 Alta · 7.5 CWE-125 08/09/2026

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77495 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77494 Alta · 7.5 CWE-843 08/09/2026

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77493 Crítica · 9.8 CWE-415 08/09/2026

Windows Graphics Component Remote Code Execution Vulnerability

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77492 Média · 5.5 CWE-125 08/09/2026

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-77491 Média · 5.5 CWE-125 08/09/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-77489 Alta · 7.8 CWE-476 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73026 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73025 Crítica · 9.8 CWE-1390 08/09/2026

Windows iSCSI Security Feature Bypass Vulnerability

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-73024 Alta · 7.8 CWE-122 08/09/2026

Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-73023 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73022 Alta · 7.0 CWE-416 08/09/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-73021 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73020 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73019 Média · 4.3 CWE-41 08/09/2026

Windows URL Moniker Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-73018 Alta · 8.8 CWE-122 08/09/2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-73017 Alta · 7.5 CWE-122 08/09/2026

Graphics Kernel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2026-73016 Alta · 8.8 CWE-122 08/09/2026

DirectWrite Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73015 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73014 Alta · 7.8 CWE-862 08/09/2026

Data Sharing Service Client Elevation of Privilege Vulnerability

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.