Vulnerabilidades do Microsoft Windows 10 Version 1607

CVE-2026-70229 Alta · 8.1 CWE-863 13/10/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70225 Alta · 7.8 CWE-843 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70223 Alta · 7.0 CWE-416 13/10/2026

Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70222 Alta · 7.8 CWE-23 13/10/2026

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70216 Média · 5.5 CWE-1220 13/10/2026

Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-70212 Alta · 7.0 CWE-923 13/10/2026

Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-70211 Média · 5.5 CWE-125 13/10/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70210 Alta · 8.8 CWE-122 13/10/2026

Windows OLE DB Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70209 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70208 Média · 5.5 CWE-125 13/10/2026

HTTP.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-70207 Alta · 7.5 CWE-122 13/10/2026

Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

CVE-2026-70205 Alta · 7.0 CWE-843 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70199 Média · 5.5 CWE-497 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70195 Média · 4.7 CWE-362 13/10/2026

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

CVE-2026-70185 Alta · 8.8 CWE-639 13/10/2026

Microsoft PowerShell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

CVE-2026-70177 Alta · 7.8 CWE-20 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70176 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70173 Média · 5.5 CWE-125 13/10/2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-70172 Alta · 7.8 CWE-822 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70170 Média · 6.5 CWE-822 13/10/2026

Windows Kernel Denial of Service Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

CVE-2026-70168 Alta · 7.0 CWE-416 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70166 Média · 6.5 CWE-125 13/10/2026

Windows DNS Denial of Service Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

CVE-2026-70164 Alta · 7.0 CWE-416 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-70160 Alta · 7.0 CWE-416 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70158 Alta · 8.8 CWE-415 13/10/2026

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine