NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Microsoft Windows
Advisory ansehen veröffentlicht 2026-09-08
Microsoft heeft 666 kwetsbaarheden verholpen in Windows.
01
beschreibt (34)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-69639US | critical9.8 | — | ||
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-85880US | high7.8OT kritisch | KEV | ||
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-81963US | high7.8OT kritisch | KEV | ||
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-78445US | critical9.8 | — | ||
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-77493US | critical9.8 | — | ||
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-73025US | critical9.8 | — | ||
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-73010US | critical9.8 | — | ||
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-73009US | critical9.8 | — | ||
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72983US | critical9.8 | — | ||
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72982US | critical9.8 | — | ||
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-72979US | critical9.8 | — | ||
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70296US | critical9.8 | — | ||
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69910US | critical9.8 | — | ||
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69845US | critical9.8 | — | ||
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69829US | critical9.8 | — | ||
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69824US | critical9.8 | — | ||
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69819US | critical9.8 | — | ||
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69769US | critical9.8 | — | ||
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69768US | critical9.8 | — | ||
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69730US | critical9.8 | — | ||
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | ||||
20 von 34 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Referenceexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan