Microsoft: >> Windows Server 2022 Security Vulnerabilities
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
CVSS Score
5.5
EPSS Score
0.003
Published
2026-09-08
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
CVSS Score
5.5
EPSS Score
0.003
Published
2026-09-08
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS Score
8.8
EPSS Score
0.009
Published
2026-09-08
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-09-08
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-09-08
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS Score
6.7
EPSS Score
0.004
Published
2026-09-08
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.012
Published
2026-09-08