Windows Server (General) · Top 20

Information published.

Microsoft CVE-2025-66413 CVSS 7.4 2026-03-26 01:38 UTC · 2026-03-25 22:38 -03

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-26128 CVSS 7.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Microsoft CVE-2026-26111 CVSS 8.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-25179 CVSS 7.0 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-25178 CVSS 7.0 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-25176 CVSS 7.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-25175 CVSS 7.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Microsoft CVE-2026-25173 CVSS 8.0 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Microsoft CVE-2026-25172 CVSS 8.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-25170 CVSS 7.0 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.

Microsoft CVE-2026-24297 CVSS 6.5 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-24294 CVSS 7.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-24293 CVSS 7.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

Microsoft CVE-2026-23669 CVSS 8.8 2026-03-10 07:00 UTC · 2026-03-10 04:00 -03

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-21232 CVSS 7.8 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-21238 CVSS 7.8 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-21241 CVSS 7.0 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft CVE-2026-21240 CVSS 7.8 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

Microsoft CVE-2026-21243 CVSS 7.5 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Microsoft CVE-2026-21244 CVSS 7.3 2026-02-10 08:00 UTC · 2026-02-10 05:00 -03