Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025 (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-69905 Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally 5.5 Moyenne 13 oct. 2026
CVE-2026-69867 Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-69909 Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-69926 Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to… 7.8 Élevée 13 oct. 2026
CVE-2026-69913 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026
CVE-2026-49785 Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally 7.8 Élevée 13 oct. 2026
CVE-2026-69363 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network 8.0 Élevée 13 oct. 2026
CVE-2026-108460 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026
CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network 9.8 Critique 13 oct. 2026
CVE-2026-108462 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized… 5.5 Moyenne 13 oct. 2026
CVE-2026-108464 Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-108465 Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-108466 Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network 5.3 Moyenne 13 oct. 2026
CVE-2026-69898 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-72968 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges… 7.0 Élevée 13 oct. 2026
CVE-2026-70566 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-105733 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 Élevée 13 oct. 2026
CVE-2026-108467 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a… 8.8 Élevée 13 oct. 2026
CVE-2026-105723 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate… 7.5 Élevée 13 oct. 2026
CVE-2026-108399 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.2 Élevée 13 oct. 2026
CVE-2026-70235 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally 5.5 Moyenne 13 oct. 2026
CVE-2026-108458 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally 7.8 Élevée 13 oct. 2026
CVE-2026-108468 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-108457 Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026

Autres produits Microsoft