Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-70225 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 Élevée 13 oct. 2026
CVE-2026-70249 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70253 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70233 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-70247 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally 7.8 Élevée 13 oct. 2026
CVE-2026-70168 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 Élevée 13 oct. 2026
CVE-2026-70150 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70169 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices… 7.0 Élevée 13 oct. 2026
CVE-2026-70195 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information… 4.7 Moyenne 13 oct. 2026
CVE-2026-70142 Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-70198 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70173 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70156 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70245 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 Élevée 13 oct. 2026
CVE-2026-70176 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70177 Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-70205 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.0 Élevée 13 oct. 2026
CVE-2026-70133 Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny… 7.5 Élevée 13 oct. 2026
CVE-2026-70118 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70119 Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network 6.5 Moyenne 13 oct. 2026
CVE-2026-70135 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-70126 Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent… 7.1 Élevée 13 oct. 2026
CVE-2026-70138 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-70115 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026

Autres produits Microsoft