DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Windows: Mehrere Schwachstellen
view advisory published 2026-09-08
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server, Microsoft Windows 10 und Microsoft Windows 11 ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service herbeizuführen, um Informationen offenzulegen und um beliebigen Code auszuführen.
01
describes (735)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-85880US | high7.8OT critical | KEV | ||
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-85877US | high8.8 | — | ||
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-85360US | high7.0 | — | ||
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-84001US | high7.5 | — | ||
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-84000US | high7.8 | — | ||
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. | ||||
| CVE-2026-83999US | high7.0 | — | ||
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges loc… | ||||
| CVE-2026-83998US | high8.8 | — | ||
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83997US | high8.1 | — | ||
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83996US | high8.8 | — | ||
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83995US | high7.8 | — | ||
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83992US | high8.8 | — | ||
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83991US | medium5.5OT elevated | Exploit | ||
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. | ||||
| CVE-2026-83990US | high7.8 | — | ||
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83989US | high7.5 | — | ||
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-83988US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83987US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83986US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83985US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83983US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-83982US | high7.8 | — | ||
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||||
showing 20 of 735
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-50349external
- Microsoft Security Advisory CVE-2026-55007external
- Microsoft Security Advisory CVE-2026-56172external
- Microsoft Security Advisory CVE-2026-56177external
- Microsoft Security Advisory CVE-2026-56198external
- Microsoft Security Advisory CVE-2026-57098external
- Microsoft Security Advisory CVE-2026-58599external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan