Skip to content

Vulnerabilities of Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-96864 Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 9.8 Critical Oct 13, 2026
CVE-2026-70147 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-70024 Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-88102 Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-85928 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-85806 Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-85818 Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing… 9.0 Critical Oct 13, 2026
CVE-2026-85809 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 9.8 Critical Oct 13, 2026
CVE-2026-85814 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over… 9.8 Critical Oct 13, 2026
CVE-2026-85792 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 9.8 Critical Oct 13, 2026
CVE-2026-69886 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-84015 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to… 9.8 Critical Oct 13, 2026
CVE-2026-83869 Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83780 Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83782 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83748 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83693 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83578 Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-69883 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-70096 Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69595 Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026

Other Microsoft products