microsoft windows server 2022 vulnerabilities, newest first, page 3
Filter
- 8.0CVE-2026-96844EPSS 0.5%
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
- 7.8CVE-2026-96843EPSS 0.4%
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-96325EPSS 1.1%
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2026-96324EPSS 0.4%
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96323EPSS 0.3%
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96322EPSS 0.3%
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-96321EPSS 0.4%
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
- 9.8CVE-2026-96320EPSS 1.1%
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-96319EPSS 0.2%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96318EPSS 0.3%
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96317EPSS 0.2%
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-96316EPSS 0.3%
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
- 5.5CVE-2026-96315EPSS 0.3%
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
- 5.5CVE-2026-96314EPSS 0.4%
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
- 7.0CVE-2026-96313EPSS 0.2%
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96312EPSS 0.3%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-96311EPSS 0.3%
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
- 7.0CVE-2026-96310EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96309EPSS 0.3%
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96308EPSS 0.3%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96307EPSS 0.2%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96305EPSS 0.2%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96304EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96302EPSS 0.2%
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96301EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 5.9CVE-2026-96300EPSS 0.9%
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
- 7.0CVE-2026-96254EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96253EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 9.1CVE-2026-96252EPSS 0.6%
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- 7.0CVE-2026-96250EPSS 0.3%
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-96248EPSS 1.1%
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
- 5.5CVE-2026-96247EPSS 0.4%
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-96246EPSS 1.0%
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2026-96245EPSS 1.0%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-96244EPSS 0.3%
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96243EPSS 0.3%
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
- 7.4CVE-2026-96222EPSS 0.6%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- 9.8CVE-2026-96219EPSS 0.9%
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- 5.5CVE-2026-96218EPSS 0.6%
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
- 7.8CVE-2026-96217EPSS 0.3%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96216EPSS 0.2%
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96209EPSS 0.3%
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96186EPSS 2.4%
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96118EPSS 0.4%
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-96113EPSS 0.9%
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-96108EPSS 0.3%
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-96096EPSS 0.7%
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2026-96071EPSS 0.6%
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
- 5.5CVE-2026-95904EPSS 0.3%
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
- 4.6CVE-2026-88226EPSS 0.5%
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.