Vulnerabilidades do Microsoft Windows Server 2025

CVE-2026-83652 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83651 Média · 6.5 CWE-125 13/10/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

CVE-2026-83650 Alta · 7.8 CWE-122 13/10/2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83649 Média · 6.5 CWE-125 13/10/2026

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

CVE-2026-83648 Média · 6.5 CWE-476 13/10/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83647 Alta · 7.5 CWE-125 13/10/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

CVE-2026-83646 Média · 4.8 CWE-601 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVE-2026-83645 Alta · 7.5 CWE-770 13/10/2026

Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83644 Alta · 7.0 CWE-416 13/10/2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83643 Alta · 8.8 CWE-121 13/10/2026

Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83642 Alta · 8.8 CWE-843 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83641 Alta · 7.8 CWE-122 13/10/2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639 Alta · 7.8 CWE-122 13/10/2026

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638 Alta · 7.8 CWE-122 13/10/2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83637 Alta · 7.8 CWE-125 13/10/2026

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83636 Média · 6.5 CWE-476 13/10/2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-83635 Alta · 7.5 CWE-125 13/10/2026

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83634 Alta · 7.8 CWE-415 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-83588 Alta · 7.8 CWE-122 13/10/2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 Alta · 7.8 CWE-822 13/10/2026

Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83586 Alta · 7.8 CWE-1390 13/10/2026

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 Alta · 7.8 CWE-134 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83584 Alta · 7.0 CWE-416 13/10/2026

Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 Alta · 7.8 CWE-862 13/10/2026

Windows Geotag Broker Elevation of Privilege Vulnerability

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.