Vulnerabilidades do Microsoft Windows Server 2025

CVE-2026-70147 Crítica · 9.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70144 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70143 Alta · 7.8 CWE-122 13/10/2026

Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

CVE-2026-70142 Alta · 7.8 CWE-426 13/10/2026

Windows Update Service Elevation of Privilege Vulnerability

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70141 Média · 5.5 CWE-125 13/10/2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-70140 Alta · 7.0 CWE-416 13/10/2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70139 Alta · 7.8 CWE-122 13/10/2026

Windows Update Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70138 Alta · 7.8 CWE-122 13/10/2026

Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70137 Média · 5.5 CWE-306 13/10/2026

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

CVE-2026-70136 Alta · 7.0 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70135 Média · 5.5 CWE-125 13/10/2026

Windows Remote POS Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

CVE-2026-70134 Alta · 7.0 CWE-416 13/10/2026

Windows Event Tracing Elevation of Privilege Vulnerability

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

CVE-2026-70133 Alta · 7.5 CWE-770 13/10/2026

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-70132 Alta · 7.8 CWE-122 13/10/2026

Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70131 Alta · 7.8 CWE-122 13/10/2026

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70128 Média · 5.5 CWE-125 13/10/2026

HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-70127 Alta · 8.1 CWE-416 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70126 Alta · 7.1 CWE-20 13/10/2026

Windows Bluetooth Port Driver Remote Code Execution

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70123 Alta · 7.8 CWE-122 13/10/2026

Microsoft Graphics Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70121 Alta · 7.8 CWE-122 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70119 Média · 6.5 CWE-125 13/10/2026

Windows DNS Remote Code Execution Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-70118 Alta · 7.0 CWE-416 13/10/2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 Alta · 7.8 CWE-122 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70116 Média · 4.2 CWE-121 13/10/2026

Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-70115 Alta · 7.0 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.