Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2022

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-70038 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026
CVE-2026-70134 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70044 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70068 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate… 8.8 Élevée 13 oct. 2026
CVE-2026-70137 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose… 5.5 Moyenne 13 oct. 2026
CVE-2026-70102 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-70131 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-69955 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 13 oct. 2026
CVE-2026-69940 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 13 oct. 2026
CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security… 5.9 Moyenne 13 oct. 2026
CVE-2026-69949 Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-69977 Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate… 7.0 Élevée 13 oct. 2026
CVE-2026-70008 Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-69982 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security… 5.9 Moyenne 13 oct. 2026
CVE-2026-70113 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88143 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges… 6.7 Moyenne 13 oct. 2026
CVE-2026-88146 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background… 7.0 Élevée 13 oct. 2026
CVE-2026-88137 Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over… 6.5 Moyenne 13 oct. 2026
CVE-2026-88140 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-88102 Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network 9.8 Critique 13 oct. 2026
CVE-2026-88136 Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-88106 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88107 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88098 Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate… 7.0 Élevée 13 oct. 2026
CVE-2026-88099 Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network 5.9 Moyenne 13 oct. 2026

Autres produits Microsoft