Vulnerabilidades do Microsoft Windows 10 Version 21H2

CVE-2026-70106 Alta · 7.8 CWE-122 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104 Alta · 7.8 CWE-822 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70103 Alta · 7.8 CWE-122 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70102 Alta · 7.8 CWE-416 13/10/2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70096 Crítica · 9.8 CWE-122 13/10/2026

Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70095 Alta · 7.5 CWE-122 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093 Alta · 7.8 CWE-122 13/10/2026

Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092 Alta · 7.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70090 Média · 5.5 CWE-908 13/10/2026

Windows Netlogon Information Disclosure Vulnerability

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

CVE-2026-70089 Alta · 8.8 CWE-122 13/10/2026

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70086 Alta · 7.0 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70084 Média · 5.5 CWE-22 13/10/2026

Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-70077 Média · 4.7 CWE-416 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70075 Média · 4.4 CWE-367 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVE-2026-70072 Média · 6.5 CWE-770 13/10/2026

Windows Netlogon Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70068 Alta · 8.8 CWE-122 13/10/2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70067 Alta · 7.0 CWE-416 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70064 Alta · 7.8 CWE-191 13/10/2026

Windows Kerberos Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70063 Média · 4.7 CWE-125 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70062 Alta · 8.1 CWE-415 13/10/2026

Windows libarchive Remote Code Execution Vulnerability

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060 Alta · 7.8 CWE-122 13/10/2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70059 Alta · 7.8 CWE-122 13/10/2026

Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70057 Média · 5.5 CWE-863 13/10/2026

Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVE-2026-70056 Alta · 7.0 CWE-416 13/10/2026

Windows Update Service Elevation of Privilege Vulnerability

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70055 Média · 5.5 CWE-497 13/10/2026

Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.