Microsoft: >> Windows Server 2019 Security Vulnerabilities
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-10-13
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-10-13
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
7.4
EPSS Score
0.006
Published
2026-10-13
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-10-13
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-10-13
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVSS Score
5.5
EPSS Score
0.006
Published
2026-10-13
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.009
Published
2026-10-13
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-10-13
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.024
Published
2026-10-13
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-10-13