NCSC-2026-0284 — Kwetsbaarheden verholpen in Microsoft Windows

Summary

Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel.

De ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.

Naast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.

Door de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.

```
Windows Accessibility Infrastructure (ATBroker.exe):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-54113 | 7.50 | Denial-of-Service |
| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten |
| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Hello:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61928 | 5.50 | Manipulatie van gegevens |
|----------------|------|-------------------------------------|

Windows Schannel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

AMD Zen:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens |
| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Secure Socket Tunneling Protocol (SSTP):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Remote Access API:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Win32K:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Autopilot:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Routing and Remote Access Service (RRAS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Common Log File System Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Remote Desktop Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft QUIC:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Installer:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Network Address Translation (NAT):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows Storage Port Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows NTFS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens |
| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

User-Mode Power Service (UMPS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Bind Filter Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Virtual Hard Disk (VHD) Miniport Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Narrator Braille:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Remote Registry Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59138 | 6.50 | Denial-of-Service |
| CVE-2026-61345 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Key Guard:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows RPC API:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows User Profile Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Telephony Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Capability Access Management Service (camsvc):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Imaging Component:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Message Queuing:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Defender Firewall Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

RPC Runtime:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Program Compatibility Assistant Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Active Directory:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Shell:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows LUAFV:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows TCP/IP:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59132 | 7.50 | Denial-of-Service |
| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Device Association Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Storage:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows GDI:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Kerberos:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Cross Device Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Deployment Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows GDI+:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows iSCSI Target Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65681 | 7.50 | Denial-of-Service |
| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code |
| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-65796 | 5.90 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Encrypting File System (EFS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Application Information Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Container Isolation FS Filter Driver (unionfs.sys):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Microsoft Local Security Authority Server (lsasrv):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows TPM:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-6727 | 5.90 | Toegang tot gevoelige gegevens |
| CVE-2026-6726 | 7.90 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows USB Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Projected File System:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows LDAP - Lightweight Directory Access Protocol:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Universal Disk Format File System Driver (UDFS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Backup Engine:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Cloud Files Mini Filter Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Management Instrumentation:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Microsoft Azure Attestation service and Device Health Attestation Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code |
| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Push Notifications:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Remote Desktop Client:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code |
| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code |
| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code |
| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Microsoft High Performance Computing (HPC) Pack:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Windows Search Component:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Desktop Window Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows SMB Client:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows DNS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code |
| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code |
| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code |
| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code |
| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten |
| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Network File System:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-68819 | 5.90 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows HTTP.sys:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Display Enhancement Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows SMB Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Reliable Multicast Transport Driver (RMCAST):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Management Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-70348 | 5.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows HTTP Protocol Stack:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62750 | 6.50 | Manipulatie van gegevens |
|----------------|------|-------------------------------------|

Windows Graphics Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-62702 | 6.80 | Denial-of-Service |
| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Event Logging Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Sensor Data Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Winlogon:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Work Folder Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Ancillary Function Driver for WinSock:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Modern Device Management (MDM):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft COM for Windows:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Network Connection Broker:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows License Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Wired AutoConfig Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows DWM Core Library:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Hyper-V:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Microsoft Digest Authentication:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows MIDI Service Module:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows DHCP Client:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code |
| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-65785 | 6.50 | Denial-of-Service |
| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Remote Access Connection Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Active Directory Certificate Services (AD CS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows DHCP Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
```

Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:

https://portal.msrc.microsoft.com/en-us/security-guidance

Vulnerabilities 232

High 7.0

CVE-2026-68820 Exploited Public exploit

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
KEV Aug 11, 2026
Critical 9.8

CVE-2026-59124

Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft HPC Pack 2019

Aug 11, 2026
Critical 9.8

CVE-2026-62815

Microsoft QUIC Remote Code Execution Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows NuGet

Aug 11, 2026
Critical 9.8

CVE-2026-62878 Public exploit

Windows DNS Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Critical 9.8

CVE-2026-62893

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Critical 9.8

CVE-2026-65791

Windows iSCSI Target Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-49179 Public exploit

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-59133

Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.

Microsoft Microsoft HPC Pack 2019

Aug 11, 2026
High 8.8

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62785

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62790

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62795

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62800

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62816

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62817

Windows DNS Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 8.8

CVE-2026-62818

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62822

Windows GDI+ Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.8

CVE-2026-62823

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 8.8

CVE-2026-62824

Remote Desktop Client Remote Code Execution Vulnerability

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows

Aug 11, 2026
High 8.3

CVE-2026-56179

Windows Network Address Translation (NAT) Spoofing Vulnerability

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 8.1

CVE-2026-62778

Windows DNS Elevation of Privilege Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-62781

RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-62792

Windows TCP/IP Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-62819

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-62820

Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 8.1

CVE-2026-62889

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-65679

Windows iSCSI Target Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-65789

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 8.1

CVE-2026-65796

Windows iSCSI Target Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-66802

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 8.1

CVE-2026-71331

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.9

CVE-2026-6726

An information leakage vulnerability in the TCG TPM 2.0 reference code.

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS aut…

Trusted Computing Group TPM2.0 libtpms Debian

Aug 11, 2026
High 7.8

CVE-2026-42976

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-54984 Public exploit

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-56174

Windows Narrator Braille Elevation of Privilege Vulnerability

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-59127

Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61349

Windows Work Folder Service Elevation of Privilege Vulnerability

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61353

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61355

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-61356

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61357

Application Information Services Elevation of Privilege Vulnerability

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-61358

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61359

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Aug 11, 2026
High 7.8

CVE-2026-61364

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61365

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61367

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61923

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61925

Windows Installer Elevation of Privilege Vulnerability

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61926

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61930

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61932

Windows DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-61934

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-61937

Windows HTTP.sys Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62688

Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.8

CVE-2026-62692

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62695

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Aug 11, 2026
High 7.8

CVE-2026-62696

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62698

Microsoft Digest Authentication Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62700

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62701

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62707

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62710

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62711

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62712

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62713

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62717

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62719

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62721

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62722

Microsoft Brokering File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62732

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62733

Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62735 Public exploit

Windows HTTP.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62736

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62737 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62739

Windows HTTP.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62741

Windows HTTP.sys Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62747

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62751

Windows Projected File System Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62752

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62754

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62755

Windows DHCP Client Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62758

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62761

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.8

CVE-2026-62768

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62770

Windows Shell Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62771

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62772

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.8

CVE-2026-62776

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.8

CVE-2026-62777

Windows License Manager Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62779

Windows Schannel Elevation of Privilege Vulnerability

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62783

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62797

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62799

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.8

CVE-2026-62803

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.8

CVE-2026-62807

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.8

CVE-2026-62811

Windows HTTP.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Aug 11, 2026
High 7.8

CVE-2026-62812

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.8

CVE-2026-62832

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62876

Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62877

Windows Win32k Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android

Aug 11, 2026
High 7.8

CVE-2026-62880

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62885

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62888

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-62890

Windows GDI+ Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-62894

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65671

Remote Access API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65672

Remote Access API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Aug 11, 2026
High 7.8

CVE-2026-65773

Windows Kernel Elevation of Privilege Vulnerability

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65774

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65775

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65786

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65787

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65790

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-65814

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-66799

Windows Key Guard Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-66804 Public exploit

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows 10 Version 22H2 Windows 11 Version 24H2 Windows 11 Version 25H2 Windows

Aug 11, 2026
High 7.8

CVE-2026-70344

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-70345

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-70346

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.8

CVE-2026-70347

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-54113

Remote Procedure Call Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-59132

Windows TCP/IP Denial of Service Vulnerability

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-59134

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-61352

Remote Desktop Client Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-61363

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.5

CVE-2026-62787

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
High 7.5

CVE-2026-65681

Windows iSCSI Target Service Denial of Service Vulnerability

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-50472

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-59122

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-59125

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-59126

Windows Event Logging Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-61346

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-61348

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-61361

Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-61366

Windows Network Connection Broker Elevation of Privilege Vulnerability

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-61927

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-61929

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-61938

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-61939

Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62690

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62693

Windows MIDI Service Module Elevation of Privileges Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.0

CVE-2026-62705

Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.0

CVE-2026-62723

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62724

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62725

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62726

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62728

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62729

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62734

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62748

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62749

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-62753

Windows HTTP.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62766

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-62773

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62774

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62780

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-62788

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-62892

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-62908

Windows Backup Engine Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-65678

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
High 7.0

CVE-2026-65776

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-65778

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-65779

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.0

CVE-2026-65780

Windows Autopilot Elevation of Privilege Vulnerability

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
High 7.0

CVE-2026-65781

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-65782

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-65783

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-65788

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
High 7.0

CVE-2026-70307

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.8

CVE-2026-62699

Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.8

CVE-2026-62702

Windows Graphics Kernel Denial of Service Vulnerability

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-62769

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-62881

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-62883

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-65795

Windows DNS Elevation of Privilege Vulnerability

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-65797

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-65798

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-65799

Windows DNS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-70304

Windows DNS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.7

CVE-2026-70330

Windows DNS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.6

CVE-2026-61920

Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-59138

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-61345

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-61918

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-61921

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-61924

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62714

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62715

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62716

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62718

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62720

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62742

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62745

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62750

Windows HTTP Protocol Stack Tampering Vulnerability

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62782

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-62814

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-65785

Windows DHCP Client Denial of Service Vulnerability

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
Medium 6.5

CVE-2026-65794

Windows SMB Client Information Disclosure Vulnerability

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 6.4

CVE-2026-62708

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
Medium 5.9

CVE-2026-6727

CVE-2026-6727

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of cipherte…

Trusted Computing Group TPM2.0 libtpms libtpms Debian Ubuntu

Aug 11, 2026
Medium 5.9

CVE-2026-68819

Windows Network File System Denial of Service Vulnerability

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.6

CVE-2026-59130

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.6

CVE-2026-59131

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-59128

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-59135

Microsoft Windows Search Component Information Disclosure Vulnerability

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-59136

Microsoft COM for Windows Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-59137

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-61347

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-61360

Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-61928

Windows Hello Tampering Vulnerability

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-61933

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-61936

Windows Defender Firewall Service Security Feature Bypass Vulnerability

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62703

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62709

Windows GDI+ Information Disclosure Vulnerability

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62730

Windows Wired AutoConfig Service Information Disclosure Vulnerability

Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62738

Windows Management Instrumentation Information Disclosure Vulnerability

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62740

Windows Imaging Component Information Disclosure Vulnerability

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android

Aug 11, 2026
Medium 5.5

CVE-2026-62743

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62746

Win32k Information Disclosure Vulnerability

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62775

Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.

Microsoft Windows 11 version 26H1 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62786

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62793

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62796

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62798

Win32k Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-62887

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-65662

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-65784

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.5

CVE-2026-70348

Windows Management Services Denial of Service Vulnerability

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.

Microsoft Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows

Aug 11, 2026
Medium 5.3

CVE-2026-62757

Windows Schannel Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 5.3

CVE-2026-65777

Active Directory Security Feature Bypass Vulnerability

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Aug 11, 2026
Medium 5.0

CVE-2026-61368

Windows Hyper-V Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026
Medium 4.6

CVE-2026-61350

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026

Revision history

2026-08-11 #1.0.0
Initiele versie

Kwetsbaarheden verholpen in Microsoft Windows

Summary

Details

Vulnerabilities 232

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

Microsoft QUIC Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Windows SMBv3 Server Remote Code Execution Vulnerability

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Windows SMBv3 Server Remote Code Execution Vulnerability

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Windows DHCP Server Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Network Address Translation (NAT) Spoofing Vulnerability

Windows DNS Elevation of Privilege Vulnerability

RPC Runtime Library Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

An information leakage vulnerability in the TCG TPM 2.0 reference code.

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Windows Imaging Component Remote Code Execution Vulnerability

Windows Narrator Braille Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Work Folder Service Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Sensor Data Service Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Application Information Services Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows USB Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows MIDI Service Module Elevation of Privileges Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Microsoft Digest Authentication Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Message Queuing Elevation of Privilege Vulnerability

Windows Message Queuing Elevation of Privilege Vulnerability

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows DHCP Client Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability