Veille CVE

Mercredi 2 septembre 2026

20 CVE

  1. CVE-2026-65789 8.1 Élevée

    Microsoft Windows Server 2016 · Microsoft Windows Server 2016 (Server Core installation) · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation)

    Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-62893 9.8 Critique

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-62878 9.8 Critique

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-62823 8.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

  5. CVE-2026-62820 8.1 Élevée

    Microsoft Windows Server 2016 · Microsoft Windows Server 2016 (Server Core installation) · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation)

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-62814 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. CVE-2026-62812 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-62807 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  9. CVE-2026-62803 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-62787 7.5 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Use after free in Windows DNS allows an authorized attacker to execute code over a network.

  11. CVE-2026-62776 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-62761 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  13. CVE-2026-62745 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  14. CVE-2026-62742 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  15. CVE-2026-62720 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  16. CVE-2026-62718 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  17. CVE-2026-62716 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  18. CVE-2026-62715 6.5 Moyenne

    Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation) · Microsoft Windows Server 2016 · Microsoft Windows Server 2016 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  19. CVE-2026-62714 6.5 Moyenne

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  20. CVE-2026-61920 6.6 Moyenne

    Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation) · Microsoft Windows Server 2016 · Microsoft Windows Server 2016 (Server Core installation)

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.