Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2016

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-40380 Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a… 6.2 Moyenne 12 mai 2026
CVE-2026-40377 Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-35423 Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network 5.4 Moyenne 12 mai 2026
CVE-2026-35424 Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an… 7.5 Élevée 12 mai 2026
CVE-2026-35421 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally 7.8 Élevée 12 mai 2026
CVE-2026-35422 Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a… 6.5 Moyenne 12 mai 2026
CVE-2026-35420 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-35415 Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate… 7.8 Élevée 12 mai 2026
CVE-2026-35416 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.0 Élevée 12 mai 2026
CVE-2026-34351 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.8 Élevée 12 mai 2026
CVE-2026-34347 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally 7.0 Élevée 12 mai 2026
CVE-2026-34345 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.0 Élevée 12 mai 2026
CVE-2026-34344 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 Élevée 12 mai 2026
CVE-2026-34342 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler… 7.0 Élevée 12 mai 2026
CVE-2026-34343 Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate… 7.8 Élevée 12 mai 2026
CVE-2026-34333 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-34330 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX… 7.8 Élevée 12 mai 2026
CVE-2026-34331 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX… 7.0 Élevée 12 mai 2026
CVE-2026-34329 Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent… 8.8 Élevée 12 mai 2026
CVE-2026-33834 Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-21530 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally 6.7 Moyenne 12 mai 2026
CVE-2026-32214 Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information… 5.5 Moyenne 14 avr. 2026
CVE-2026-33829 Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to… 4.3 Moyenne 14 avr. 2026
CVE-2026-33824 Exploitée Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability 9.8 Critique 14 avr. 2026
CVE-2026-33827 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 8.1 Élevée 14 avr. 2026

Autres produits Microsoft