Skip to content

Vulnerabilities of Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-88122 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-88123 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-88125 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-88129 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-88112 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88114 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88116 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88093 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88117 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-88119 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-70111 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network 8.1 High Oct 13, 2026
CVE-2026-70158 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Oct 13, 2026
CVE-2026-70160 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70228 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70250 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network 8.8 High Oct 13, 2026
CVE-2026-70229 Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a… 8.1 High Oct 13, 2026
CVE-2026-70260 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an… 5.5 Medium Oct 13, 2026
CVE-2026-70261 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an… 5.5 Medium Oct 13, 2026
CVE-2026-69915 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70054 Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70143 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-70084 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-69884 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69902 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally 6.7 Medium Oct 13, 2026

Other Microsoft products