Skip to content

Known vulnerabilities in Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-77489 Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-77491 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72986 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69476 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69787 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-72980 Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally 4.4 Medium Sep 8, 2026
CVE-2026-72981 Use after free in IP Helper allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-77495 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-72979 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72978 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an… 5.9 Medium Sep 8, 2026
CVE-2026-70283 Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70124 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69929 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69930 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network 5.9 Medium Sep 8, 2026
CVE-2026-69846 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-69603 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Sep 8, 2026
CVE-2026-69576 Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69604 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69580 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69589 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69583 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69548 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical… 4.6 Medium Sep 8, 2026

Other Microsoft products