Aller au contenu

Vulnérabilités de Microsoft Windows Server 2008 R2 Service Pack 1

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-59513 Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information… 5.5 Moyenne 11 nov. 2025
CVE-2025-59278 Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to… 7.8 Élevée 14 oct. 2025
CVE-2025-59275 Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to… 7.8 Élevée 14 oct. 2025
CVE-2025-59230 Exploitée Microsoft Windows Improper Access Control Vulnerability 7.8 Élevée 14 oct. 2025
CVE-2025-59214 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to… 6.5 Moyenne 14 oct. 2025
CVE-2025-59208 Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network 7.1 Élevée 14 oct. 2025
CVE-2025-59205 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics… 7.0 Élevée 14 oct. 2025
CVE-2025-59198 Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally 5.0 Moyenne 14 oct. 2025
CVE-2025-59190 Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally 5.5 Moyenne 14 oct. 2025
CVE-2025-59187 Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 14 oct. 2025
CVE-2025-58739 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to… 6.5 Moyenne 14 oct. 2025
CVE-2025-58736 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 Élevée 14 oct. 2025
CVE-2025-58733 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 Élevée 14 oct. 2025
CVE-2025-58730 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 Élevée 14 oct. 2025
CVE-2025-58729 Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to… 6.5 Moyenne 14 oct. 2025
CVE-2025-58726 Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network 7.5 Élevée 14 oct. 2025
CVE-2025-58725 Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally 7.0 Élevée 14 oct. 2025
CVE-2025-58718 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 Élevée 14 oct. 2025
CVE-2025-58714 Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 Élevée 14 oct. 2025
CVE-2025-55695 Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally 5.5 Moyenne 14 oct. 2025
CVE-2025-55678 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally 7.0 Élevée 14 oct. 2025
CVE-2025-25004 Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.3 Élevée 14 oct. 2025
CVE-2025-59295 Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network 8.8 Élevée 14 oct. 2025
CVE-2025-59282 Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects… 7.0 Élevée 14 oct. 2025
CVE-2025-59280 Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network 3.1 Faible 14 oct. 2025

Autres produits Microsoft