Skip to content

Known vulnerabilities in Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-87710 Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate… 7.0 High Oct 13, 2026
CVE-2026-87712 Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-87713 Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent… 7.5 High Oct 13, 2026
CVE-2026-87706 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-87714 Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network 6.5 Medium Oct 13, 2026
CVE-2026-87707 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87716 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a… 7.5 High Oct 13, 2026
CVE-2026-88070 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88071 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85930 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85931 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a… 8.8 High Oct 13, 2026
CVE-2026-85933 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85945 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85934 Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85935 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-85928 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network 5.3 Medium Oct 13, 2026
CVE-2026-70277 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70270 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate… 5.5 Medium Oct 13, 2026
CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83710 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform… 8.1 High Oct 13, 2026
CVE-2026-83888 Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network 6.5 Medium Oct 13, 2026
CVE-2026-85329 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account… 7.0 High Oct 13, 2026

Other Microsoft products