Microsoft Windows Server 2025 vulnerabilities

CVE-2026-50679 [HIGH] CWE-122 CVE-2026-50679: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-54987 [HIGH] CWE-122 CVE-2026-54987: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-50494 [HIGH] CWE-122 CVE-2026-50494: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-50499 [HIGH] CWE-122 CVE-2026-50499: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-50417 [HIGH] CWE-20 CVE-2026-50417: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-50327 [HIGH] CWE-122 CVE-2026-50327: Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

CVE-2026-83919 [HIGH] CWE-122 CVE-2026-83919: Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to exec Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

CVE-2026-85341 [HIGH] CWE-122 CVE-2026-85341: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85318 [HIGH] CWE-122 CVE-2026-85318: Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-85915 [HIGH] CWE-122 CVE-2026-85915: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96920 [HIGH] CWE-122 CVE-2026-96920: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88168 [HIGH] CWE-122 CVE-2026-88168: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40377 [HIGH] CWE-122 CVE-2026-40377: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevat Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-70278 [HIGH] CWE-122 CVE-2026-70278: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-69528 [HIGH] CWE-306 CVE-2026-69528: Missing authentication for critical function in Windows Shell allows an authorized attacker to eleva Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.