Veille CVE

Mardi 12 mai 2026

6 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « kernel » ✕
  1. CVE-2026-40408 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-40369 7.8 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-35420 7.8 Élevée

    Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-34332 8.0 Élevée

    Microsoft Windows Server 2025 · Microsoft Windows Server 2025 (Server Core installation)

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

  5. CVE-2026-33841 7.8 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  6. CVE-2025-27723 6.8 Moyenne

    Intel(R) Ethernet 800 series

    Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.