Veille CVE

Jeudi 22 octobre 2026

23 CVE

Critique 0 Élevée 19 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Windows Server 2025 » ✕
  1. CVE-2026-96912 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-96911 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-96914 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-96913 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-70108 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-70111 8.1 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-70114 7.8 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-70117 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  9. CVE-2026-70121 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-70144 7.0 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  11. CVE-2026-70160 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-70170 6.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

  13. CVE-2026-70176 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  14. CVE-2026-70199 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  15. CVE-2026-70209 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  16. CVE-2026-70211 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  17. CVE-2026-70232 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  18. CVE-2026-70236 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  19. CVE-2026-70243 7.0 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows Server 2025 · Microsoft Windows Server 2025 (Server Core installation) · Microsoft windows 11 23h2

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  20. CVE-2026-70249 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  21. CVE-2026-70253 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  22. CVE-2026-70271 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  23. CVE-2026-70273 7.0 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.