Patch tuesday sept 2026

Genererad 2026-09-08 21:24 · kÀlla MSRC 2026-Sep · Noggrann (gemma4:e4b) · 119 utelÀmnade

Sammanfattning för ledningen

Microsofts uppdateringar för september 2026

Microsofts sÀkerhetsuppdateringar för september 2026 omfattar 800 sÄrbarheter i produkter som anvÀnds i vÄr miljö. 2 av dem utnyttjas redan i pÄgÄende angrepp och ska ÄtgÀrdas först. 100 klassas som kritiska av Microsoft. SÄrbarheterna ÄtgÀrdas av 45 uppdateringar (KB). Antalet uppdateringar som ska installeras Àr alltsÄ betydligt mindre Àn antalet sÄrbarheter. 688 berör serverdrift och 112 klientdatorer.

Utnyttjas i pĂ„gĂ„ende angrepp — Ă„tgĂ€rda först

Angripare anvÀnder dessa sÄrbarheter redan nu. HÀr rÀcker det inte att vÀnta till nÀsta patchfönster.

  • CVE-2026-81963
    Behörighetshöjning i Windows Update Stack Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11...
  • CVE-2026-85880
    Behörighetshöjning i Windows Advanced Local Procedure Call (ALPC) Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10...

Detta behöver göras

21
st
Inom 24 timmar
SÄrbarheter som utnyttjas i pÄgÄende angrepp eller har högsta allvarlighetsgrad. Installera uppdateringarna omgÄende.
262
st
Inom 48 timmar
Allvarliga sÄrbarheter utan kÀnt pÄgÄende utnyttjande. Planera in installation direkt efter de akuta.
517
st
Inom 7 dagar
ÅtgĂ€rdas i ordinarie patchfönster den hĂ€r veckan.

Vad sÄrbarheterna kan leda till

422
Behörighetshöjning
NÄgon som redan kommit in kan ta sig högre behörighet Àn den ska ha.
53 %
248
FjÀrrkörning av kod
Angripare kan köra egen kod pÄ maskinen utan att sitta vid den.
31 %
71
InformationslÀckage
Uppgifter kan lÀsas av obehöriga.
9 %
42
Överbelastning
TjÀnsten kan slÄs ut sÄ att den inte gÄr att anvÀnda.
5 %
8
Förfalskning
Angripare kan utge sig för att vara nÄgon annan.
1 %
6
Förbikoppling av sÀkerhetsfunktion
En skyddsfunktion kan kringgÄs.
1 %
3
Manipulation
Data kan Àndras utan att det upptÀcks.
0 %
45
uppdateringar att installera
100
kritiska enligt Microsoft
688
berör serverdrift
112
berör klientdatorer
Mest berörda produktomrÄden: Windows Server (604),Office (90),SQL Server (62),Windows Client (22),SharePoint (13),Exchange (9)

119 lÀgre prioriterade sÄrbarheter ligger utanför rapporten pÄ grund av taket för antal CVE:er per körning. 800 av 800 poster saknar AI-sammanfattning; klassificering, allvarlighetsgrad och ÄtgÀrdsfrist bygger pÄ Microsofts egna uppgifter och pÄverkas inte av det.

KĂ€llor och körningslogg â–Œ

Totalt

800

Utnyttjas

2

2 i CISA KEV

CVSS 8+

257

Servrar

688

Klienter

112

Filtrera

Visar 800 av 800
📧
Exchange 9 CVE:er
5 CVSS 8+
▌
PRIO (48h)

Förfalskning i Microsoft Exchange Server

9.3 CVSS
Förfalskning Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Exchange Server

9.1 CVSS
Behörighetshöjning Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Exchange Server

8.8 CVSS
FjÀrrkörning av kod Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Exchange Server

8.1 CVSS
FjÀrrkörning av kod Viktig Exchange CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Exchange Server

8.1 CVSS
Behörighetshöjning Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Microsoft Exchange Server

7.5 CVSS
Överbelastning Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förfalskning i Microsoft Exchange Server

6.5 CVSS
Förfalskning Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Manipulation i Microsoft Exchange Server

6.5 CVSS
Manipulation Viktig Exchange CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Exchange Server

5.9 CVSS
InformationslÀckage Viktig Exchange CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

📄 Microsofts beskrivning

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
📎
Office 90 CVE:er
41 CVSS 8+
▌
AKUT (24h)

FjÀrrkörning av kod i Microsoft Office Outlook

9.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Microsoft Word

9.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Microsoft Office Outlook

9.0 uppskattad
FjÀrrkörning av kod Kritisk Office
Uppdatering: KB5002919
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)

📄 Microsofts beskrivning

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Access

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002913
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Access

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002912
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Outlook

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002919
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office PowerPoint

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002920
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)

📄 Microsofts beskrivning

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Publisher

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002644
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Publisher 2016 (32-bit edition), Microsoft Publisher 2016 (64-bit edition)

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office PowerPoint

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002920
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)

📄 Microsofts beskrivning

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Access

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002913
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office PowerPoint

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002920
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)

📄 Microsofts beskrivning

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Graphics Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office for Android

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Excel

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Outlook

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002898
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Publisher

8.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002644
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Publisher 2016 (32-bit edition), Microsoft Publisher 2016 (64-bit edition)

📄 Microsofts beskrivning

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Word

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Graphics Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Word

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021

📄 Microsofts beskrivning

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Office Online Server

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Office Online Server

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.8 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office

7.5 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Office Access

7.3 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002912
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

7.0 uppskattad
InformationslÀckage Viktig Office
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Outlook

7.0 uppskattad
InformationslÀckage Viktig Office
Uppdatering: KB5002919
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

7.0 uppskattad
InformationslÀckage Viktig Office
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Office PowerPoint

7.0 uppskattad
FjÀrrkörning av kod Viktig Office
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

📄 Microsofts beskrivning

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Excel

7.0 CVSS
FjÀrrkörning av kod Viktig Office CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

InformationslÀckage i Microsoft Office Outlook

6.5 CVSS
FjÀrrkörning av kod Kritisk Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förfalskning i Microsoft Office

6.5 CVSS
Förfalskning Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office PowerPoint

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office PowerPoint

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Excel

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office PowerPoint

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002920
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office PowerPoint

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002920
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Excel

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Outlook

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002898
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office PowerPoint

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office Word

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002923
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office

6.5 CVSS
InformationslÀckage Viktig Office CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002916
PÄverkar: Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024

📄 Microsofts beskrivning

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
📄
SharePoint 13 CVE:er
7 CVSS 8+
▌
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office SharePoint

8.8 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office SharePoint

8.8 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office SharePoint

8.8 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Office SharePoint

8.8 CVSS
Behörighetshöjning Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office SharePoint

8.8 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Office SharePoint

8.8 CVSS
Behörighetshöjning Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office SharePoint

8.8 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Office SharePoint

7.5 CVSS
FjÀrrkörning av kod Viktig SharePoint CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förfalskning i Microsoft Office SharePoint

7.3 CVSS
Förfalskning Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förfalskning i Microsoft Office SharePoint

7.3 CVSS
Förfalskning Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office SharePoint

6.5 CVSS
InformationslÀckage Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office SharePoint

6.5 CVSS
InformationslÀckage Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Office SharePoint

6.5 CVSS
InformationslÀckage Viktig SharePoint CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Uppdatering: KB5002908
PÄverkar: Microsoft SharePoint Server Subscription Edition

📄 Microsofts beskrivning

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
đŸ—„ïž
SQL Server 62 CVE:er
35 CVSS 8+
▌
AKUT (24h)

Behörighetshöjning i Microsoft SQL Server

9.6 CVSS
Behörighetshöjning Kritisk SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: SQL Server Management Studio 22

📄 Microsofts beskrivning

Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Azure Arc SQL Server Extension

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Azure Arc SQL Server Extension

📄 Microsofts beskrivning

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Use after free in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Kritisk SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Kritisk SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i SQL Server

8.8 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows OLE DB

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i SQL Server

8.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.5 CVSS
FjÀrrkörning av kod Kritisk SQL Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.5 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.5 CVSS
FjÀrrkörning av kod Kritisk SQL Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft SQL Server

8.1 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 25), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU6), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft SQL Server

7.8 CVSS
FjÀrrkörning av kod Viktig SQL Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Microsoft SQL Server

7.5 CVSS
Överbelastning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i SQL Server

7.0 CVSS
Behörighetshöjning Viktig SQL Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Use after free in SQL Server allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förbikoppling av sÀkerhetsfunktion i Microsoft SQL Server

6.5 CVSS
Förbikoppling av sÀkerhetsfunktion Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Microsoft SQL Server

6.5 CVSS
Överbelastning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Microsoft SQL Server

6.5 CVSS
Överbelastning Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft SQL Server

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows OLE DB

6.5 CVSS
InformationslÀckage Viktig SQL Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

📄 Microsofts beskrivning

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
đŸ’»
Windows Client 22 CVE:er
8 CVSS 8+
▌
PRIO (48h)

FjÀrrkörning av kod i Raw Image Extension

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Client CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems, Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems, Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems, Raw Image Extension on Windows 10 Version 22H2 for 32-bit Systems, Raw Image Extension on Windows 10 Version 22H2 for ARM64-based Systems, Raw Image Extension on Windows 10 Version 22H2 for x64-based Systems, Raw Image Extension on Windows 11 Version 24H2 for ARM64-based Systems, Raw Image Extension on Windows 11 Version 24H2 for x64-based Systems, Raw Image Extension on Windows 11 Version 25H2 for ARM64-based Systems, Raw Image Extension on Windows 11 Version 25H2 for x64-based Systems, Raw Image Extension on Windows 11 Version 26H1 for ARM64-based Systems, Raw Image Extension on Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

8.8 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

8.8 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Web Media Extensions

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Client CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Web Media Extensions on Windows 10 Version 21H2 for 32-bit Systems, Web Media Extensions on Windows 10 Version 21H2 for ARM64-based Systems, Web Media Extensions on Windows 10 Version 21H2 for x64-based Systems, Web Media Extensions on Windows 10 Version 22H2 for 32-bit Systems, Web Media Extensions on Windows 10 Version 22H2 for ARM64-based Systems, Web Media Extensions on Windows 10 Version 22H2 for x64-based Systems, Web Media Extensions on Windows 11 Version 23H2 for ARM64-based Systems, Web Media Extensions on Windows 11 Version 23H2 for x64-based Systems, Web Media Extensions on Windows 11 Version 24H2 for ARM64-based Systems, Web Media Extensions on Windows 11 Version 24H2 for x64-based Systems, Web Media Extensions on Windows 11 Version 25H2 for ARM64-based Systems, Web Media Extensions on Windows 11 Version 25H2 for x64-based Systems, Web Media Extensions on Windows 11 Version 26H1 for ARM64-based Systems, Web Media Extensions on Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Print Spooler

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Client CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5124008
PÄverkar: Windows 11 Version 24H2 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

8.2 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Secure Kernel Mode

8.2 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5124012
PÄverkar: Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows DHCP Client

8.0 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

7.8 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Double free in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

7.8 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

7.8 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Graphics Component

7.8 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows MIDI Service Module

7.8 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows SMB Client

7.8 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5124012
PÄverkar: Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows MIDI Service Module

7.8 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Work Folders

7.8 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

7.5 CVSS
Behörighetshöjning Kritisk Windows Client CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Mobile Broadband

7.5 CVSS
InformationslÀckage Viktig Windows Client CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows MIDI Service Module

7.0 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Credential Guard

7.0 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows MIDI Service Module

7.0 CVSS
Behörighetshöjning Viktig Windows Client CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
đŸ–„ïž
Windows Server 604 CVE:er
2 exploit 161 CVSS 8+
▌
AKUT (24h)

FjÀrrkörning av kod i Windows Message Queuing

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Routing and Remote Access Service (RRAS)

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Services for NFS ONCRPC XDR Driver

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows DNS Server

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows HTTP Print Provider

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Shell

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows DHCP Server

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Imaging Component

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows DHCP Server

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Netlogon

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Internet Connection Sharing (ICS)

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Secure Socket Tunneling Protocol (SSTP)

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Microsoft Failover Cluster

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Graphics Component

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
AKUT (24h)

FjÀrrkörning av kod i Windows Services for NFS ONCRPC XDR Driver

9.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows USB Mass Storage Class Driver

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft UxTheme Library (uxtheme.dll)

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Telnet Client

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows NTFS

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft DirectMusic

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Event Logging Service

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Compressed Folder

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Services

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows PDF

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Direct Show

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows RNDIS

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i RPC Runtime Library

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Standard XPS

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Hyper-V

9.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Förbikoppling av sÀkerhetsfunktion i Windows iSCSI

9.8 CVSS
Förbikoppling av sÀkerhetsfunktion Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Volume Manager Extension Driver

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Volume Manager Extension Driver

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows URL Moniker

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows NTFS

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Event Logging Service

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Event Logging Service

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Remote Desktop

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i .NET and Visual Studio

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: .NET 10.0 installed on Windows, .NET 11.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bi

📄 Microsofts beskrivning

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows iSCSI

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Windows Media Foundation

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Hyper-V

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows iSCSI

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Kernel

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Kerberos

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Key Distribution Center

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Credential Providers

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Network File System

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Media Player

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Paint

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Work Folder Service

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Remote Access Connection Manager

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft WDAC OLE DB provider for SQL

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Schannel

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Routing and Remote Access Service (RRAS)

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Routing and Remote Access Service (RRAS)

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Media Player

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Graphic Fonts

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i DirectWrite

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Management Services

8.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i DirectWrite

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Graphic Fonts

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Office Word

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Remote Desktop client for Windows Desktop

📄 Microsofts beskrivning

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Remote Desktop client for Windows Desktop

📄 Microsofts beskrivning

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Remote Desktop client for Windows Desktop

📄 Microsofts beskrivning

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Hyper-V

8.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Remote Desktop Services

8.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Imaging Component

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Error Reporting

8.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Remote Desktop Client

8.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows NTFS

8.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows NTFS

8.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.4 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Secure Kernel Mode

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows ALPC

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Secure Kernel Mode

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Credential Guard

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hyper-V

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows USB Video Driver

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Hello

8.2 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft JScript

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft JScript

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Active Directory Domain Services

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Reliable Multicast Transport Driver (RMCAST)

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Active Directory Domain Services

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Förfalskning i Windows DNS

8.1 CVSS
Förfalskning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Link Layer Topology Discovery Protocol

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Text Shaping

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Ancillary Function Driver for WinSock

8.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Förfalskning i Windows Shell

8.1 CVSS
Förfalskning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows SMB Client

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i IP Helper

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in IP Helper allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DNS Server

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Microsoft Failover Cluster

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Reliable Multicast Transport Driver (RMCAST)

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Reliable Multicast Transport Driver (RMCAST)

8.1 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Message Queuing

8.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows GDI+

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Program Compatibility Assistant Service

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Fast FAT Driver

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Win32k

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Error Reporting

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Standard XPS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Win32k

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Windows Search Component

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Print Spooler Components

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft Local Security Authority (LSA) Server

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Overlay Filter

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Volume Manager Driver

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows USB Video Driver

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Microsoft VOLSNAP.SYS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows BitLocker

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Error Reporting

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Enterprise App Management

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows USB Driver

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Spaceport.sys

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows exFAT File System

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows HTTP Print Provider

8.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Connected User Experiences and Telemetry

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Spaceport.sys

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Virtual Hard Disk (VHD) Miniport Driver

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Win32k

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Device Association Service

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Group Policy

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Biometric Service

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Win32k

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Biometric Service

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i PowerShell

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Biometric Service

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows NTFS

8.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows DHCP Server

8.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
CVE-2026-81963 Utnyttjas aktivt CISA KEV
AKUT (24h)

Behörighetshöjning i Windows Update Stack

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C CISA-deadline 2026-09-22
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
CVE-2026-85880 Utnyttjas aktivt CISA KEV
AKUT (24h)

Behörighetshöjning i Windows Advanced Local Procedure Call (ALPC)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C CISA-deadline 2026-09-22
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i HEVC Video Extensions

7.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: HEVC Video Extensions, HEVC Video Extensions for Licensed Applications, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 26H1 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 version 26H1 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows Server 2019, HEVC Video Extensions from Device Manufacturer on Windows Server 2019 (Server Core installation), HEVC Video Extensions from Device Manufacturer on Windows Server 2022, HEVC Video Extensions from Device Manufacturer on Windows Server 2022 (Server Core installation), HEVC Video Extensions from Device M

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Deployment Services

7.8 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Virtualization-Based Security (VBS) Enclave

7.8 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows VHD miniport driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Server

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Server allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Trace Data Helper

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i HEVC Video Extensions

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: HEVC Video Extensions, HEVC Video Extensions for Licensed Applications, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 26H1 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 version 26H1 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows Server 2019, HEVC Video Extensions from Device Manufacturer on Windows Server 2019 (Server Core installation), HEVC Video Extensions from Device Manufacturer on Windows Server 2022, HEVC Video Extensions from Device Manufacturer on Windows Server 2022 (Server Core installation), HEVC Video Extensions from Device M

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Push Notifications

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Active Directory Certificate Services (AD CS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Storage Spaces Controller

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Program Compatibility Assistant Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Account

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows NTFS

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Storage Spaces Controller

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Local Security Authority (LSA) Server

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows CD-ROM Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows DCOM Server

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Setup Files Cleanup

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Storage Spaces Controller

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Performance Monitor

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Storage

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Active Directory Domain Services

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Overlay Filter

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Device Management (MDM)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Storage Management Provider

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Broker Infrastructure Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Shell

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Volume Manager Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft VOLSNAP.SYS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel-Mode Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Distributed File System (DFS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows VOLSNAP.SYS

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Volume Manager Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Speech

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Compressed Folder

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Access Connection Manager

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Speech

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Power Dependency Coordinator

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Desktop Services

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Partition Management Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Role: Windows Fax Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Shell

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Program Compatibility Assistant Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Spaceport.sys

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Virtual Hard Disk (VHD) Miniport Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Camera Frame Server Monitor

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows CD-ROM Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Graphic Fonts

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Volume Manager Extension Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Video Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Universal Disk Format File System Driver (UDFS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Local Security Authority (LSA) Server

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kerberos

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Spaceport.sys

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows NTFS

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i HID Class Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Universal Disk Format File System Driver (UDFS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Smart Card

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Credential Providers

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Active Directory Certificate Services (AD CS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kerberos

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025

📄 Microsofts beskrivning

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Encrypting File System (EFS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Kernel Streaming WOW Thunk Service Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Enterprise App Management

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Spaceport.sys

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Virtual Hard Disk (VHD) Miniport Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Core Messaging

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Core Messaging

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NFS Portmapper

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Storage Management Provider

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Remote Access Connection Manager

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Installer

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Role: Windows Fax Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Storage Port Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows WebClient Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Network Connection Broker

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Data Sharing Service Client

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Services for NFS ONCRPC XDR Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Volume Manager Extension Driver

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Resilient File System (ReFS)

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Graphics Component

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft Graphics Component

7.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Routing and Remote Access Service (RRAS)

7.5 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Virtual Trusted Platform Module

7.5 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Deployment Services

7.5 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Graphics Kernel

7.5 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Virtual Hard Disk (VHD) Miniport Driver

7.5 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Remote Desktop App for Windows

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Remote Desktop client for Windows Desktop

📄 Microsofts beskrivning

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förfalskning i Windows Netlogon

7.5 CVSS
Förfalskning Viktig Windows Server CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Active Directory Domain Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Message Queuing Queue Manager

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i BranchCache

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Microsoft OpenSSH for Windows

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows LDAP - Lightweight Directory Access Protocol

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Internet Key Exchange (IKE) Protocol Extensions

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Device Health Attestation (DHA)

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Remote Desktop Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Remote Desktop Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Internet Key Exchange (IKE) Extension

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows TCP/IP

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Remote Desktop Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Deployment Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DNS

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Kerberos

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Kerberos

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förbikoppling av sÀkerhetsfunktion i Windows TCP/IP

7.5 CVSS
Förbikoppling av sÀkerhetsfunktion Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Active Directory Domain Services

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Internet Key Exchange (IKE) Extension

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Routing and Remote Access Service (RRAS)

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Remote Desktop Protocol

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Services for NFS ONCRPC XDR Driver

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows DNS Server

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Uppdatering: KB5122871
PÄverkar: Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Message Queuing Queue Manager

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Deployment Services

7.5 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows SMB Server Network Transport Driver (srvnet.sys)

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Failover Cluster

7.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Services for NFS ONCRPC XDR Driver

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Key Distribution Center

7.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Fast FAT Driver

7.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Remote Desktop Licensing Service

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Broker Service

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Registry

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Remote Desktop Gateway Service

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NDIS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Remote Desktop Client

7.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Virtual Hard Disk (VHD) Miniport Driver

7.1 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NDIS

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Management Instrumentation

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Device Management (MDM)

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Manipulation i Windows Error Reporting

7.1 CVSS
Manipulation Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Remote Desktop Services

7.1 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Hyper-V

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows HTTP.sys

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows PrintWorkflowUserSvc

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Encrypting File System (EFS)

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows TCP/IP

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows TCP/IP

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows DWM Core Library

7.1 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Behörighetshöjning i Windows Secure Kernel Mode

7.0 CVSS
Behörighetshöjning Kritisk Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

FjÀrrkörning av kod i Windows Services for NFS ONCRPC XDR Driver

7.0 CVSS
FjÀrrkörning av kod Kritisk Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Ancillary Function Driver for WinSock

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Installer

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Connected User Experiences and Telemetry

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bind Filter Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows File History Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Connected User Experiences and Telemetry

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025

📄 Microsofts beskrivning

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Standard XPS

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Kernel Streaming WOW Thunk Service Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Cloud Files Mini Filter Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Push Notifications

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows License Manager

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Desktop Services

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Remote Desktop Gateway Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft COM for Windows

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Push Notifications

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows DNS

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Video Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Access Connection Manager

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Image Acquisition

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Shell

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows TCP/IP

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bluetooth Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bluetooth Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Audio Video Control Transport Protocol

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows TCP/IP

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Video Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Embedded Mode Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Installer

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bluetooth Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Volume Manager Extension Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Connected User Experiences and Telemetry

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Devices Human Interface

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Partition Management Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Image Acquisition

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Connected Devices Platform Service (Cdpsvc)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Wireless Networking

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Virtual Hard Disk (VHD) Miniport Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Work Folder Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Program Compatibility Assistant Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Online Certificate Status Protocol (OCSP)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Universal Disk Format File System Driver (UDFS)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Storage Spaces Controller

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Install Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Shell

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Virtual Hard Disk (VHD) Miniport Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Image Acquisition

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Resilient File System (ReFS)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Role: Windows Fax Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Message Queuing

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Notification

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Accounts Control

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Host Guardian Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Broker Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows IP Address Management (IPAM) Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Web Platform Storage

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Broadcast DVR User Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Credential Providers

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Accounts Control

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bluetooth Port Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows ALPC

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Print Spooler Components

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Bluetooth Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Media

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Error Reporting

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows Search Component

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Win32k

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Audio Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows AF_UNIX Socket Provider

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Display Enhancement Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Defender Firewall Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Biometric Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Device Management (MDM)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Secure Socket Tunneling Protocol (SSTP)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Access Connection Manager

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows File History Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Remote Access Connection Manager

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Routing and Remote Access Service (RRAS)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Routing and Remote Access Service (RRAS)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Internet Connection Sharing (ICS)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Secure Socket Tunneling Protocol (SSTP)

7.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

7.0 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Execution Server

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Device Management (MDM)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Authentication Methods

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Modern Device Management (MDM)

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Installer

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Security Center

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Management Instrumentation

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Security Health Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Cloud Files Mini Filter Driver

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Device Association Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Resilient File System (ReFS) Deduplication Service

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Kernel

7.0 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows NTFS

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows DHCP Server

6.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Mass Storage Class Driver

6.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows NTFS

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows NTFS

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows Spaceport.sys

6.8 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Volume Shadow Copy

6.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Hub Driver

6.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Boot Manager

6.8 CVSS
Förbikoppling av sÀkerhetsfunktion Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Microsoft Windows SCSI Class System File

6.8 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Overlay Filter

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Overlay Filter

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows BitLocker

6.7 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Installer

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Winsock

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows NTFS

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows DNS

6.7 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows USB Audio Class driver (usbaudio.sys)

6.6 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Active Directory Domain Services

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Förbikoppling av sÀkerhetsfunktion i Microsoft PowerShell

6.5 CVSS
Förbikoppling av sÀkerhetsfunktion Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows iSCSI

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Connected User Experiences and Telemetry

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows DHCP Server

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows SMB Server

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Active Directory Certificate Services (AD CS)

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Server

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Manipulation i Active Directory Certificate Services (AD CS)

6.5 CVSS
Manipulation Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DHCP Client

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows iSCSI Target Service

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Compressed Folder

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Routing and Remote Access Service (RRAS)

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Spaceport.sys

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows Remote Desktop Client

6.5 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Microsoft Windows SCSI Class System File

6.5 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows DHCP Server

6.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Management Instrumentation

6.4 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows Failover Cluster

6.4 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Behörighetshöjning i Windows File History Service

6.4 CVSS
Behörighetshöjning Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

📄 Microsofts beskrivning

Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows DHCP Server

6.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

FjÀrrkörning av kod i Windows DHCP Server

6.4 CVSS
FjÀrrkörning av kod Viktig Windows Server CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows DHCP Server

5.9 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows DHCP Server

5.9 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows DHCP Server

5.9 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DNS

5.9 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows DHCP Server

5.9 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Active Directory Federation Services (AD FS)

5.9 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

Överbelastning i Windows DNS Server

5.9 CVSS
Överbelastning Viktig Windows Server CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Program Compatibility Assistant Service

5.7 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PLANERAT (7 dagar)

InformationslÀckage i Windows Remote Desktop Client

5.7 CVSS
InformationslÀckage Viktig Windows Server CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

InformationslÀckage i Windows Virtualization-Based Security (VBS)

5.5 CVSS
InformationslÀckage Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad
PRIO (48h)

Förbikoppling av sÀkerhetsfunktion i Windows Hello

4.4 CVSS
Förbikoppling av sÀkerhetsfunktion Kritisk Windows Server CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
PÄverkar: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)

📄 Microsofts beskrivning

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. Engelsk originaltext frÄn Microsoft. Ingen AI-sammanfattning gjord för denna CVE.

đŸ› ïž ÅtgĂ€rd / Workaround

Ingen specifik workaround nÀmnd i analysen. Installera officiell patch via Windows Update/SCCM.

○ Ej pĂ„börjad

Genererad av Security Watch AI · Kontrollera alltid officiella kÀllor vid osÀkerhet.