cve.bz

microsoft windows server 2025 vulnerabilities, newest first, page 52

Filter
  1. 7.8CVE-2026-32069EPSS 0.3%

    Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-32068EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  3. 5.5CVE-2026-27931EPSS 0.5%

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

  4. 5.5CVE-2026-27930EPSS 0.4%

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

  5. 7.0CVE-2026-27929EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.

  6. 8.7CVE-2026-27928EPSS 0.4%

    Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

  7. 7.0CVE-2026-27927EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-27926EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  9. 6.5CVE-2026-27925EPSS 0.4%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

  10. 7.8CVE-2026-27923EPSS 0.2%

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-27922EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2026-27921EPSS 1.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-27920EPSS 0.2%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2026-27919EPSS 0.3%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-27918EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

  16. 7.0CVE-2026-27917EPSS 0.2%

    Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2026-27916EPSS 0.2%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-27915EPSS 0.3%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2026-27914EPSS 2.4%

    Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

  20. 8.0CVE-2026-27912EPSS 0.4%

    Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

  21. 7.8CVE-2026-27911EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-27910EPSS 0.2%

    Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-27909EPSS 1.8%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-27908EPSS 1.6%

    Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-27907EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-26184EPSS 0.2%

    Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-26183EPSS 0.3%

    Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-26182EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-26181EPSS 0.2%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-26180EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-26179EPSS 0.4%

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  32. 8.8CVE-2026-26178EPSS 0.4%

    Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.

  33. 7.0CVE-2026-26177EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-26176EPSS 0.2%

    Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.

  35. 4.6CVE-2026-26175EPSS 0.4%

    Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.

  36. 7.0CVE-2026-26174EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-26173EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-26172EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-26170EPSS 0.2%

    Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

  40. 6.1CVE-2026-26169EPSS 2.3%

    Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

  41. 7.8CVE-2026-26168EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-26167EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  43. 7.0CVE-2026-26166EPSS 0.2%

    Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-26165EPSS 0.3%

    Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-26163EPSS 0.3%

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-26162EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.

  47. 7.8CVE-2026-26161EPSS 0.3%

    Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-26160EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-26159EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-26156EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.