Skip to content

Known vulnerabilities in Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-80083 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Sep 8, 2026
CVE-2026-78523 Use after free in Windows DNS allows an unauthorized attacker to deny service over a network 5.9 Medium Sep 8, 2026
CVE-2026-78508 Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical… 4.6 Medium Sep 8, 2026
CVE-2026-77904 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-77896 Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network 6.5 Medium Sep 8, 2026
CVE-2026-77895 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77894 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer… 7.0 High Sep 8, 2026
CVE-2026-77893 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77891 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally 6.4 Medium Sep 8, 2026
CVE-2026-77892 No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical… 6.8 Medium Sep 8, 2026
CVE-2026-77889 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77890 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77886 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77888 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77505 Use after free in DNS Server allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-77887 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally 6.4 Medium Sep 8, 2026
CVE-2026-77504 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-77502 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77503 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 8.4 High Sep 8, 2026
CVE-2026-77499 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77501 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77498 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-77493 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-77494 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker… 7.5 High Sep 8, 2026
CVE-2026-77492 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026

Other Microsoft products