Vulnerabilidades do Microsoft Windows 11 23h2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows 11 23h2: 661 registro(s), com versões afetadas e correções.cpe:2.3:o:microsoft:windows_11_23h2
CVE-2026-96951
Alta · 8.8
KEV Alta · 52 CWE-77 13/10/2026
Microsoft Windows Command Injection Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81963
Alta · 7.8
KEV Alta · 46 CWE-59 08/09/2026
Microsoft Windows Link Following Vulnerability
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-78446
Alta · 7.5
CWE-416 08/09/2026
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2026-69436
Alta · 7.8
CWE-122 08/09/2026
Windows State Repository Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68820
Alta · 7.0
KEV Alta · 51 Exploit público CWE-416 11/08/2026
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-62769
Média · 6.7
CWE-122 11/08/2026
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62712
Alta · 7.8
CWE-122 11/08/2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-50507
Média · 6.8
CWE-306 09/06/2026
Windows BitLocker Security Feature Bypass Vulnerability
Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-49160
Alta · 7.5
CWE-400 09/06/2026
HTTP.sys Denial of Service Vulnerability
Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.
CVE-2026-48583
Alta · 7.8
CWE-416 09/06/2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-48578
Alta · 7.9
CWE-284 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.
CVE-2026-48576
Alta · 7.9
CWE-1329 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48575
Alta · 7.9
CWE-693 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48574
Alta · 7.8
CWE-122 09/06/2026
Windows Media Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
CVE-2026-48573
Alta · 7.9
CWE-1329 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48570
Alta · 7.9
CWE-693 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48568
Alta · 7.9
CWE-693 09/06/2026
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48563
Alta · 7.5
CWE-787 09/06/2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47656
Alta · 7.9
CWE-693 09/06/2026
Windows Boot Manager Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
CVE-2026-47653
Alta · 8.8
CWE-787 09/06/2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47652
Alta · 8.2
CWE-122 09/06/2026
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-47648
Alta · 7.0
CWE-426 09/06/2026
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-47291
Crítica · 9.8
CWE-122 09/06/2026
HTTP.sys Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.
CVE-2026-47289
Alta · 8.8
CWE-122 09/06/2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-45658
Média · 6.8
CWE-284 09/06/2026
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.