NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Windows
view advisory published 2026-09-08
Microsoft heeft 666 kwetsbaarheden verholpen in Windows.
01
describes (34)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-69639US | critical9.8 | — | ||
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-85880US | high7.8OT critical | KEV | ||
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-81963US | high7.8OT critical | KEV | ||
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-78445US | critical9.8 | — | ||
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-77493US | critical9.8 | — | ||
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-73025US | critical9.8 | — | ||
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-73010US | critical9.8 | — | ||
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-73009US | critical9.8 | — | ||
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72983US | critical9.8 | — | ||
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72982US | critical9.8 | — | ||
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72979US | critical9.8 | — | ||
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70296US | critical9.8 | — | ||
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69910US | critical9.8 | — | ||
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69845US | critical9.8 | — | ||
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69829US | critical9.8 | — | ||
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69824US | critical9.8 | — | ||
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69819US | critical9.8 | — | ||
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69769US | critical9.8 | — | ||
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69768US | critical9.8 | — | ||
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69730US | critical9.8 | — | ||
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | ||||
showing 20 of 34
02
references
External citations — patches, advisories, analysis.
- Referenceexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan