cve.bz

microsoft windows server 2022 vulnerabilities, newest first, page 28

Filter
  1. 4.6CVE-2026-69548EPSS 0.5%

    Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

  2. 8.8CVE-2026-69547EPSS 0.9%

    Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

  3. 8.1CVE-2026-69546EPSS 0.7%

    Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

  4. 7.8CVE-2026-69541EPSS 0.3%

    Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-69540EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  6. 7.5CVE-2026-69539EPSS 0.7%

    Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

  7. 7.8CVE-2026-69538EPSS 0.3%

    Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

  8. 7.8CVE-2026-69535EPSS 0.3%

    Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-69534EPSS 0.3%

    Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2026-69532EPSS 0.3%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  11. 5.5CVE-2026-69531EPSS 0.3%

    Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

  12. 8.1CVE-2026-69530EPSS 0.7%

    Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

  13. 5.5CVE-2026-69527EPSS 0.4%

    Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

  14. 9.8CVE-2026-69525EPSS 1.0%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  15. 8.1CVE-2026-69524EPSS 0.7%

    Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

  16. 8.8CVE-2026-69518EPSS 0.8%

    Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

  17. 7.0CVE-2026-69517EPSS 0.3%

    Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2026-69516EPSS 0.3%

    Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

  19. 7.5CVE-2026-69514EPSS 0.7%

    Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

  20. 7.8CVE-2026-69513EPSS 0.3%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  21. 8.8CVE-2026-69512EPSS 0.8%

    Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

  22. 8.8CVE-2026-69511EPSS 0.8%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  23. 8.1CVE-2026-69510EPSS 0.7%

    Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  24. 7.8CVE-2026-69509EPSS 0.3%

    Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

  25. 5.7CVE-2026-69507EPSS 0.9%

    Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.

  26. 8.0CVE-2026-69505EPSS 0.8%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

  27. 5.5CVE-2026-69504EPSS 0.4%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  28. 8.0CVE-2026-69503EPSS 0.8%

    Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

  29. 7.0CVE-2026-69501EPSS 0.3%

    Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  30. 7.0CVE-2026-69500EPSS 0.3%

    Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

  31. 8.8CVE-2026-69499EPSS 0.8%

    Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

  32. 7.0CVE-2026-69498EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  33. 6.5CVE-2026-69497EPSS 1.1%

    Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.

  34. 9.8CVE-2026-69496EPSS 1.0%

    Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

  35. 8.8CVE-2026-69495EPSS 0.8%

    Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

  36. 8.8CVE-2026-69494EPSS 0.8%

    Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

  37. 9.8CVE-2026-69493EPSS 1.0%

    Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

  38. 7.0CVE-2026-69492EPSS 0.3%

    Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

  39. 9.8CVE-2026-69491EPSS 1.0%

    Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

  40. 6.8CVE-2026-69490EPSS 0.4%

    Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  41. 7.8CVE-2026-69489EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-69488EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  43. 8.8CVE-2026-69485EPSS 0.9%

    Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

  44. 4.7CVE-2026-69483EPSS 0.3%

    Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.

  45. 7.1CVE-2026-69482EPSS 0.5%

    Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

  46. 8.0CVE-2026-69481EPSS 0.8%

    Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

  47. 7.8CVE-2026-69480EPSS 0.3%

    Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

  48. 8.4CVE-2026-69479EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2026-69478EPSS 0.3%

    Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-69476EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.