Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows Server 2025
Total 2205 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-62715 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more 2026-09-02 N/A 6.5 MEDIUM
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62714 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more 2026-09-02 N/A 6.5 MEDIUM
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-61920 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows 11 26h1 and 5 more 2026-09-02 N/A 6.6 MEDIUM
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-59131 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-25 N/A 5.6 MEDIUM
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-59130 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-25 N/A 5.6 MEDIUM
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-65795 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2026-08-21 N/A 6.7 MEDIUM
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-71331 1 Microsoft 4 Windows 10 1809, Windows Server 2019, Windows Server 2022 and 1 more 2026-08-20 N/A 8.1 HIGH
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-66802 1 Microsoft 5 Windows 10 1809, Windows 11 26h1, Windows Server 2019 and 2 more 2026-08-20 N/A 8.1 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-20846 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-19 N/A 7.5 HIGH
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.
CVE-2026-33824 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-19 N/A 9.8 CRITICAL
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-62723 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62724 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62725 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62726 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62729 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62732 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62734 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62748 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70330 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 6.7 MEDIUM
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-59127 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-17 N/A 7.8 HIGH
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.