Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025 (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-84009 Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to… 4.7 Moyenne 13 oct. 2026
CVE-2026-84011 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally 5.5 Moyenne 13 oct. 2026
CVE-2026-83920 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-83921 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.0 Élevée 13 oct. 2026
CVE-2026-83922 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-83914 Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026
CVE-2026-83916 Double free in Windows Error Reporting allows an authorized attacker to execute code locally 7.0 Élevée 13 oct. 2026
CVE-2026-83917 Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-83926 Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally 4.4 Moyenne 13 oct. 2026
CVE-2026-83919 Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally 7.8 Élevée 13 oct. 2026
CVE-2026-85841 Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network 6.6 Moyenne 13 oct. 2026
CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to… 7.8 Élevée 13 oct. 2026
CVE-2026-83769 Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-83741 Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-83911 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-83871 Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-83912 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-83906 Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform… 6.5 Moyenne 13 oct. 2026
CVE-2026-83886 Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70128 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70151 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-70089 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-70163 Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny… 7.5 Élevée 13 oct. 2026
CVE-2026-70222 Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-70248 Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally 6.5 Moyenne 13 oct. 2026

Autres produits Microsoft