Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-69549 Alta · 7.0 CWE-125 08/09/2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69548 Média · 4.6 CWE-122 08/09/2026

Windows RNDIS Information Disclosure Vulnerability

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69547 Alta · 8.8 CWE-122 08/09/2026

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-69546 Alta · 8.1 CWE-416 08/09/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69542 Alta · 7.8 CWE-122 08/09/2026

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-69541 Alta · 7.8 CWE-122 08/09/2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69540 Alta · 7.0 CWE-416 08/09/2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69539 Alta · 7.5 CWE-416 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69538 Alta · 7.8 CWE-125 08/09/2026

Windows Spaceport.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-69536 Alta · 7.1 CWE-416 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69535 Alta · 7.8 CWE-122 08/09/2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69534 Alta · 7.8 CWE-77 08/09/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69532 Alta · 7.8 CWE-125 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69531 Média · 5.5 CWE-441 08/09/2026

Microsoft Windows Speech Tampering Vulnerability

Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

CVE-2026-69530 Alta · 8.1 CWE-416 08/09/2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-69528 Alta · 7.8 CWE-306 08/09/2026

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69527 Média · 5.5 CWE-125 08/09/2026

Windows USB Mass Storage Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

CVE-2026-69525 Crítica · 9.8 CWE-416 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69524 Alta · 8.1 CWE-416 08/09/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69518 Alta · 8.8 CWE-122 08/09/2026

Windows Remote Desktop Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVE-2026-69517 Alta · 7.0 CWE-416 08/09/2026

Windows Wireless Networking Elevation of Privilege Vulnerability

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

CVE-2026-69516 Alta · 7.0 CWE-416 08/09/2026

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-69514 Alta · 7.5 CWE-122 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69513 Alta · 7.8 CWE-122 08/09/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69512 Alta · 8.8 CWE-122 08/09/2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.