Vulnerabilidades do Microsoft Windows 10 Version 22H2

CVE-2026-69354 Alta · 7.8 CWE-122 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69326 Alta · 8.8 CWE-122 13/10/2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-68836 Alta · 7.8 CWE-122 13/10/2026

Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

CVE-2026-62879 Média · 5.5 CWE-306 13/10/2026

Windows SmartScreen Tampering Vulnerability

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.

CVE-2026-62687 Média · 5.5 CWE-59 13/10/2026

Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

CVE-2026-61931 Alta · 7.8 CWE-416 13/10/2026

Windows Perception Simulation Service Elevation of Privilege Vulnerability

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

CVE-2026-59116 Média · 6.8 CWE-327 13/10/2026

Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-49785 Alta · 7.8 CWE-404 13/10/2026

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-109453 Alta · 7.0 CWE-122 13/10/2026

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-108468 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-108467 Alta · 8.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

CVE-2026-108466 Média · 5.3 CWE-125 13/10/2026

Windows Kernel Denial of Service Vulnerability

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-108465 Alta · 7.0 CWE-416 13/10/2026

Windows Update Delivery Optimization Elevation of Privilege Vulnerability

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.

CVE-2026-108464 Alta · 7.0 CWE-416 13/10/2026

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

CVE-2026-108462 Média · 5.5 CWE-497 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-108461 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-108460 Alta · 8.1 CWE-416 13/10/2026

Windows Message Queuing Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-108458 Alta · 8.8 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-108457 Alta · 8.1 CWE-787 13/10/2026

Microsoft Windows PDF Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVE-2026-108399 Alta · 7.2 CWE-122 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-108396 Alta · 7.0 CWE-367 13/10/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-108136 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-108135 Alta · 7.0 CWE-59 13/10/2026

Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-108132 Alta · 7.0 CWE-415 13/10/2026

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-108131 Alta · 7.5 CWE-295 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.