cve.bz

microsoft windows server 2025 vulnerabilities, newest first, page 12

Filter
  1. 5.5CVE-2026-83733EPSS 0.5%

    Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  2. 7.8CVE-2026-83732EPSS 0.4%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  3. 8.8CVE-2026-83728EPSS 0.3%

    Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

  4. 7.8CVE-2026-83727EPSS 0.4%

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2026-83726EPSS 0.4%

    Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  6. 8.8CVE-2026-83725EPSS 0.8%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

  7. 7.0CVE-2026-83724EPSS 0.3%

    Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  8. 5.5CVE-2026-83723EPSS 0.5%

    Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  9. 7.0CVE-2026-83722EPSS 0.2%

    Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2026-83721EPSS 0.4%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  11. 5.5CVE-2026-83719EPSS 0.4%

    Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

  12. 7.0CVE-2026-83718EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-83717EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  14. 8.8CVE-2026-83716EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

  15. 7.1CVE-2026-83715EPSS 0.3%

    Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

  16. 5.5CVE-2026-83714EPSS 0.4%

    Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

  17. 5.5CVE-2026-83713EPSS 0.9%

    Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

  18. 7.8CVE-2026-83712EPSS 0.4%

    Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

  19. 7.0CVE-2026-83710EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-83709EPSS 0.4%

    Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-83708EPSS 0.3%

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-83707EPSS 0.3%

    Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

  23. 6.7CVE-2026-83706EPSS 0.4%

    Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

  24. 5.5CVE-2026-83705EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

  25. 7.8CVE-2026-83704EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  26. 6.5CVE-2026-83703EPSS 0.7%

    Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

  27. 7.0CVE-2026-83702EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-83701EPSS 0.3%

    Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-83700EPSS 0.4%

    Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-83699EPSS 0.4%

    Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-83698EPSS 0.4%

    Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  32. 4.7CVE-2026-83697EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

  33. 7.0CVE-2026-83696EPSS 0.3%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  34. 5.5CVE-2026-83695EPSS 0.5%

    Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  35. 7.0CVE-2026-83694EPSS 0.3%

    Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

  36. 9.8CVE-2026-83693EPSS 1.1%

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

  37. 7.8CVE-2026-83692EPSS 0.4%

    Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-83691EPSS 0.4%

    Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-83690EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-83689EPSS 0.3%

    Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  41. 8.8CVE-2026-83688EPSS 0.9%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  42. 7.0CVE-2026-83687EPSS 0.3%

    Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

  43. 5.5CVE-2026-83686EPSS 0.5%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  44. 6.5CVE-2026-83685EPSS 1.3%

    Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

  45. 6.5CVE-2026-83683EPSS 1.3%

    Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

  46. 7.0CVE-2026-83682EPSS 0.3%

    Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-83680EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-83679EPSS 0.4%

    Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-83678EPSS 0.4%

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  50. 7.5CVE-2026-83677EPSS 1.1%

    Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.