Jeudi 15 octobre 2026
20 CVE
-
CVE-2026-69982 5.9 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-78457 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2022
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
-
CVE-2026-62824 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
CVE-2026-62769 6.7 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-62712 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-58619 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-57090 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-50480 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2
Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50465 7.1 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
-
CVE-2026-50461 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
-
CVE-2026-50436 7.8 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50420 5.5 Moyenne
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.
-
CVE-2026-50392 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50390 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50387 7.8 Élevée
Microsoft Office 365 for Mac · Microsoft Office for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50331 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.
-
CVE-2026-50323 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
-
CVE-2026-49802 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-49790 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
-
CVE-2026-49789 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.