Veille CVE

Jeudi 15 octobre 2026

15 CVE

Critique 2 Élevée 11 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft windows 7 » ✕
  1. CVE-2026-69982 5.9 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

  2. CVE-2025-71316 9.8 Critique

    SQLite sqldiff · Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)

    SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.

  3. CVE-2026-78457 7.0 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2022

    Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-62824 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2

    Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-62769 6.7 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-62712 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

  7. CVE-2026-58619 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-57090 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-50480 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2

    Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-50461 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  11. CVE-2026-50390 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-50387 7.8 Élevée

    Microsoft Office 365 for Mac · Microsoft Office for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

  13. CVE-2026-50331 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.

  14. CVE-2026-49790 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

  15. CVE-2026-49789 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.