Windows Server (General) · Top 20

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-108132 CVSS 7.0 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

Microsoft CVE-2026-97813 CVSS 6.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-97810 CVSS 7.0 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-105009 CVSS 7.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Microsoft CVE-2026-105008 CVSS 9.0 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

Microsoft CVE-2026-105005 CVSS 8.1 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Microsoft CVE-2026-103558 CVSS 7.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

Microsoft CVE-2026-102214 CVSS 8.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-102202 CVSS 7.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

Microsoft CVE-2026-102198 CVSS 5.3 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Microsoft CVE-2026-102192 CVSS 7.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-70023 CVSS 7.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-100217 CVSS 7.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-97792 CVSS 7.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Microsoft CVE-2026-97790 CVSS 5.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-97787 CVSS 7.0 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Microsoft CVE-2026-96945 CVSS 7.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-96931 CVSS 7.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Microsoft CVE-2026-96934 CVSS 9.8 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Microsoft CVE-2026-96927 CVSS 5.5 2026-10-13 07:00 UTC · 2026-10-13 04:00 -03