Veille CVE

Vendredi 23 octobre 2026

16 CVE

Critique 1 Élevée 13 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Windows Server 2022 » ✕
  1. CVE-2026-108132 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-108136 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-108396 7.0 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-83862 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.

  5. CVE-2026-68836 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-69326 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-69354 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-69363 8.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

  9. CVE-2026-69387 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-69452 7.1 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

  11. CVE-2026-69471 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-69506 4.7 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

  13. CVE-2026-69521 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-96222 7.4 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  15. CVE-2026-85790 5.9 Moyenne

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.Native.Quic.MsQuic.Schannel · Microsoft Windows 11 Version 23H2

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

  16. CVE-2026-105016 9.8 Critique

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.