DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Windows Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
describes (240)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-72971US | — | — | ||
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering loca… | ||||
| CVE-2026-71331US | — | — | ||
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70348US | — | — | ||
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally. | ||||
| CVE-2026-70347US | — | — | ||
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70346US | — | — | ||
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70345US | — | — | ||
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70344US | — | — | ||
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70330US | high7.8 | — | ||
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70307US | — | — | ||
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70304US | high7.8 | — | ||
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-68820US | —OT critical | KEV | ||
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-68819US | high7.5 | — | ||
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-66804US | — | Exploit | ||
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-66802US | — | — | ||
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute co… | ||||
| CVE-2026-66799US | — | — | ||
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65814US | — | — | ||
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65813US | high8.8 | — | ||
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-65799US | high7.8 | — | ||
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65798US | — | — | ||
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65797US | — | — | ||
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-42976external
- Microsoft Security Advisory CVE-2026-49179external
- Microsoft Security Advisory CVE-2026-50472external
- Microsoft Security Advisory CVE-2026-54113external
- Microsoft Security Advisory CVE-2026-54984external
- Microsoft Security Advisory CVE-2026-56174external
- Microsoft Security Advisory CVE-2026-56179external
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan