Microsoft Windows und Windows Server: Mehrere Schwachstellen
WID-SEC-2026-3892 · first 14.10.2026 · updated 15.10.2026 · CVSS 9,8
What it is about
Windows ist ein Betriebssystem von Microsoft. Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server und Microsoft Windows ausnutzen, um seine Privilegien auf administrative Rechte zu erhöhen, um beliebigen Code auszuführen, um Informationen offenzulegen, um einen Denial of Service herbeizuführen, um den Benutzer zu täuschen und andere, nicht näher spezifizierte Auswirkungen zu verursachen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically. For some of the vulnerabilities a person has to take part, for example by opening a file, email or web page.
What can happen in the worst case
An attacker could use the vulnerability to
- seine Privilegien auf administrative Rechte zu erhöhen
- beliebigen Code auszuführen
- Informationen offenzulegen
- einen Denial of Service herbeizuführen
- den Benutzer zu täuschen, andere, nicht näher spezifizierte Auswirkungen zu verursachen
Am I affected?
Affected according to the BSI:
- Microsoft Windows Security App
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012
- Microsoft Windows Server 2016
- Microsoft Windows Server 2025
- Microsoft Windows 10
- Microsoft Windows 11
- Microsoft Windows Server 2022
- Microsoft Windows Server 2019
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Install the updates provided by the vendor; details in the sources below.
Is the vulnerability already being exploited?
- CVE-2026-96951: exploited in the wild according to CISA, in the catalogue since 13.10.2026.
Information and sources
- Original BSI advisory (WID)
- Microsoft Leitfaden für Sicherheitsupdates msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70260 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70292 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70252 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70261 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70262 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70271 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70272 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70275 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70277 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70278 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70284 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70286 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70288 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70258 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70293 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70566 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-70295 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83517 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83515 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83514 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83513 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83510 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83509 msrc.microsoft.com
- Microsoft Security Advisory CVE-2026-83508 msrc.microsoft.com
and 1105 more sources in the original advisory
CVE: CVE-2026-83712, CVE-2026-83713, CVE-2026-83714, CVE-2026-83715, CVE-2026-83716, CVE-2026-83717, CVE-2026-83718, CVE-2026-83719, CVE-2026-83720, CVE-2026-83721, CVE-2026-83722, CVE-2026-83723, CVE-2026-83724, CVE-2026-83725, CVE-2026-83726, CVE-2026-83727, CVE-2026-83728, CVE-2026-83732, CVE-2026-83733, CVE-2026-83735 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.