Skip to content

Known vulnerabilities in Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-84001 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-83998 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-83996 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally 8.8 High Sep 8, 2026
CVE-2026-83991 Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker… 5.5 Medium Sep 8, 2026
CVE-2026-70290 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-83976 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83975 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83974 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83979 Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83988 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83969 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83955 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83986 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69492 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69573 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-72937 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-72940 Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-72949 Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-69827 Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an… 8.1 High Sep 8, 2026
CVE-2026-69989 Use after free in DNS Server allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-70065 Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny… 7.5 High Sep 8, 2026
CVE-2026-83942 Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-81355 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code… 7.5 High Sep 8, 2026
CVE-2026-80093 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-80075 Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026

Other Microsoft products