Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-49657 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-48824 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-47987 Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges… 7.8 Élevée 8 juil. 2025
CVE-2025-47986 Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally 8.8 Élevée 8 juil. 2025
CVE-2025-47985 Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47984 Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network 7.5 Élevée 8 juil. 2025
CVE-2025-47976 Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47972 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method… 8.0 Élevée 8 juil. 2025
CVE-2025-47971 Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47159 Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 7.8 Élevée 8 juil. 2025
CVE-2025-33073 Exploitée Microsoft Windows SMB Client Improper Access Control Vulnerability 8.8 Élevée 10 juin 2025
CVE-2025-33070 Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network 8.1 Élevée 10 juin 2025
CVE-2025-33057 Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over… 6.5 Moyenne 10 juin 2025
CVE-2025-33056 Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny… 7.5 Élevée 10 juin 2025
CVE-2025-33055 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally 5.5 Moyenne 10 juin 2025
CVE-2025-33053 Exploitée Microsoft Windows External Control of File Name or Path Vulnerability 8.8 Élevée 10 juin 2025
CVE-2025-33052 Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally 5.5 Moyenne 10 juin 2025
CVE-2025-33050 Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 Élevée 10 juin 2025
CVE-2025-32725 Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 Élevée 10 juin 2025
CVE-2025-24065 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally 5.5 Moyenne 10 juin 2025
CVE-2025-24069 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally 5.5 Moyenne 10 juin 2025
CVE-2025-24068 Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally 5.5 Moyenne 10 juin 2025
CVE-2025-33071 Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network 8.1 Élevée 10 juin 2025
CVE-2025-47955 Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate… 7.8 Élevée 10 juin 2025
CVE-2025-47160 Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a… 5.4 Moyenne 10 juin 2025

Autres produits Microsoft