Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-70052 Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally 7.8 Élevée 13 oct. 2026
CVE-2026-70041 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70048 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-88165 Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-88159 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.8 Élevée 13 oct. 2026
CVE-2026-88168 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88160 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows… 7.0 Élevée 13 oct. 2026
CVE-2026-88162 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering… 5.5 Moyenne 13 oct. 2026
CVE-2026-88173 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.1 Élevée 13 oct. 2026
CVE-2026-87711 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-85927 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to… 7.8 Élevée 13 oct. 2026
CVE-2026-88096 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server… 7.0 Élevée 13 oct. 2026
CVE-2026-87708 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88080 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88101 Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88124 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88091 Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-88157 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-88158 Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-88161 Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-85915 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-85864 Improper privilege management in Python allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-85871 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-85865 Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally 5.5 Moyenne 13 oct. 2026
CVE-2026-85918 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges… 7.0 Élevée 13 oct. 2026

Autres produits Microsoft