Summary
Microsoft heeft 1159 kwetsbaarheden verholpen in Windows.
Details
Interpretaties
Het voert te ver om iedere kwetsbaarheid te benoemen. De 53 ernstigste kwetsbaarheden, met een CVSS score van 9 en hoger zijn weergegeven in onderstaande lijst en geven een kwaadwillende de mogelijkheid om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen en willekeurige code uit te voeren. Deze kwetsbaarheden bevinden zich in diverse subcomponenten van Windows.
Voor daadwerkelijk misbruik hoeft geen voorafgaande authenticatie plaats te vinden en diverse kwetsbaarheden zijn op afstand, zonder gebruikersinteractie te misbruiken. Met name systemen die via publieke netwerken ontsloten zijn lopen hiermee verhoogd risico op misbruik.
|------------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|------------------|------|-------------------------------------|
| CVE-2026-100202 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-100219 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-100222 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-102210 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-105008 | 9.00 | Voordoen als andere gebruiker |
| CVE-2026-105010 | 9.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-105016 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-21413 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-69634 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-69639 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-69705 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-69883 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-69886 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70024 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70096 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70147 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70153 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70157 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-70188 | 9.10 | Omzeilen van beveiligingsmaatregel |
| CVE-2026-83517 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83519 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83578 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83693 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83748 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83770 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83780 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83782 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83862 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83869 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83910 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-83935 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-84015 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-85792 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-85806 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-85809 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-85814 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-85818 | 9.00 | Voordoen als andere gebruiker |
| CVE-2026-85844 | 9.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-85928 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-88092 | 9.40 | Manipulatie van gegevens |
| CVE-2026-88102 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-94510 | 9.90 | Verkrijgen van verhoogde rechten |
| CVE-2026-96096 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96219 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96252 | 9.10 | Voordoen als andere gebruiker |
| CVE-2026-96320 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96864 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96909 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96924 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-96934 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-97814 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-97815 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2026-97816 | 9.80 | Uitvoeren van willekeurige code |
|------------------|------|-------------------------------------|
Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
Vulnerabilities 51
-
Critical 9.9
Microsoft Bookings Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft QUIC Remote Code Execution Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
Critical 9.8CVE-2026-105016 Public exploit
Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 …
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Internet Information Services Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows System Information Console Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft PowerShell Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows CCFFilter Driver Remote Code Execution Vulnerability
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Domain Name Service Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft XML Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
Critical 9.8
Network Policy Server (NPS) Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
Critical 9.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows BitLocker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows OLE Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
-
Critical 9.4
ASP.NET Core Tampering Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
-
Critical 9.1
ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
-
Critical 9.1
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
Critical 9.0
Windows Schannel Spoofing Vulnerability
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
-
Critical 9.0
Windows Schannel Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
-
High 8.8
Windows Network Load Balancing Remote Code Execution Vulnerability
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.
Revision history
-
#1.0.0
Initiele versie