Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012 R2, Windows Server 2012, Windows Server 2016, Windows 10, Windows 11, Windows Server 2025, Windows Server 2022, Windows Server 2019, Microsoft Windows Remote Help und Windows App für Mac ausnutzen, um Administratorrechte zu erlangen, Spoofing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Product
Windows ist ein Betriebssystem von Microsoft.
Vulnerabilities 4
-
High 7.1
Windows Remote Help Defense Spoofing Vulnerability
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.
-
High 7.0
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows App for Mac Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft CVE-2026-55013 vom 2026-08-20
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55013
-
Microsoft CVE-2026-55015 vom 2026-08-20
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55015
-
Microsoft CVE-2026-62727 vom 2026-08-20
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62727
-
Microsoft CVE-2026-69550 vom 2026-08-20
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69550