Recherche « Microsoft windows server 2012 »
659 CVE
-
CVE-2026-97844 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97843 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97842 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97841 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97840 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97839 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97838 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97837 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97836 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97835 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97834 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97833 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97832 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97831 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97829 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97828 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97827 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97826 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97824 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97823 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97822 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97821 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97820 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97819 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97817 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97815 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97814 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97805 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97789 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97788 7.5 Élevée
Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-96953 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
-
Microsoft Outlook.com · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-96950 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96949 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96948 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
-
CVE-2026-96947 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96946 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96938 6.7 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96935 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
-
CVE-2026-96934 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96933 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96931 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96930 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
-
CVE-2026-96929 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96928 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96927 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
-
CVE-2026-96926 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
-
CVE-2026-96925 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
-
CVE-2026-96924 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96923 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96921 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
-
CVE-2026-96916 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96915 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96911 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96910 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
CVE-2026-96867 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
-
CVE-2026-96866 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96864 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96862 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96861 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96860 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-96859 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
-
CVE-2026-96856 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96854 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
CVE-2026-96853 4.7 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
CVE-2026-96852 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96851 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
CVE-2026-96847 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96846 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
-
CVE-2026-96844 8.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
-
CVE-2026-96843 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96325 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96324 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96322 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96320 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96318 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96316 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
-
CVE-2026-96314 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
-
CVE-2026-96312 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96311 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
-
CVE-2026-96308 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96307 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96305 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96302 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96300 5.9 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96252 9.1 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
CVE-2026-96247 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
-
CVE-2026-96246 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-96245 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-96222 7.4 Élevée
Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
CVE-2026-96217 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96209 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96186 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96118 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96113 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96096 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96071 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
-
CVE-2026-95904 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
-
CVE-2026-88226 4.6 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
-
CVE-2026-88219 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88193 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88191 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88182 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88174 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88173 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88171 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88165 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
-
CVE-2026-88161 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88160 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88159 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88158 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
-
CVE-2026-88152 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88149 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88147 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88142 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88137 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
-
CVE-2026-88136 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
-
CVE-2026-88135 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88134 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88133 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88130 6.5 Moyenne
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-88129 6.5 Moyenne
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-88126 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88125 6.5 Moyenne
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-88124 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88123 6.5 Moyenne
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-88122 6.5 Moyenne
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-88121 8.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88120 8.1 Élevée
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88119 8.1 Élevée
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88118 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88117 8.1 Élevée
Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation) · Microsoft Windows Server 2012 R2 · Microsoft Windows Server 2012 R2 (Server Core installation)
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88115 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88112 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88101 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88098 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88096 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88091 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88080 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88076 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88070 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87715 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87714 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
-
CVE-2026-87712 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87711 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87710 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87708 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87707 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87706 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87705 7.4 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.