Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025 (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-68825 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 sept. 2026
CVE-2026-72963 Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 sept. 2026
CVE-2026-72958 Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally 8.2 Élevée 8 sept. 2026
CVE-2026-72962 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally 8.2 Élevée 8 sept. 2026
CVE-2026-72948 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Moyenne 8 sept. 2026
CVE-2026-72946 Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 sept. 2026
CVE-2026-72943 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network 7.5 Élevée 8 sept. 2026
CVE-2026-72944 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 sept. 2026
CVE-2026-72935 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally 6.7 Moyenne 8 sept. 2026
CVE-2026-72939 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny… 6.5 Moyenne 8 sept. 2026
CVE-2026-71351 Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges… 7.0 Élevée 8 sept. 2026
CVE-2026-72930 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally 7.0 Élevée 8 sept. 2026
CVE-2026-71345 Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally 7.8 Élevée 8 sept. 2026
CVE-2026-72929 Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges… 7.8 Élevée 8 sept. 2026
CVE-2026-71341 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally 5.5 Moyenne 8 sept. 2026
CVE-2026-71353 Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges… 7.0 Élevée 8 sept. 2026
CVE-2026-71343 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code… 7.8 Élevée 8 sept. 2026
CVE-2026-71348 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical… 6.8 Moyenne 8 sept. 2026
CVE-2026-72926 Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 sept. 2026
CVE-2026-71339 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 6.7 Moyenne 8 sept. 2026
CVE-2026-71350 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical… 6.8 Moyenne 8 sept. 2026
CVE-2026-71338 Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally 6.4 Moyenne 8 sept. 2026
CVE-2026-71332 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges… 7.0 Élevée 8 sept. 2026
CVE-2026-71334 Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 sept. 2026
CVE-2026-71333 Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 sept. 2026

Autres produits Microsoft