Vulnerabilidades do Microsoft Windows 11 23h2

CVE-2026-69516 Alta · 7.0 CWE-416 08/09/2026

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-69514 Alta · 7.5 CWE-122 08/09/2026

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69513 Alta · 7.8 CWE-122 08/09/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69512 Alta · 8.8 CWE-122 08/09/2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-69511 Alta · 8.8 CWE-122 08/09/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69509 Alta · 7.8 CWE-122 08/09/2026

Role: Windows Fax Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69507 Média · 5.7 CWE-538 08/09/2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.

CVE-2026-69505 Alta · 8.0 CWE-125 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69504 Média · 5.5 CWE-125 08/09/2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-69503 Alta · 8.0 CWE-121 08/09/2026

Windows USB Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69501 Alta · 7.0 CWE-822 08/09/2026

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-69500 Alta · 7.0 CWE-416 08/09/2026

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-69499 Alta · 8.8 CWE-190 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69498 Alta · 7.0 CWE-416 08/09/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69496 Crítica · 9.8 CWE-122 08/09/2026

Windows Compressed Folder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

CVE-2026-69495 Alta · 8.8 CWE-122 08/09/2026

Windows Event Logging Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69494 Alta · 8.8 CWE-122 08/09/2026

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69493 Crítica · 9.8 CWE-122 08/09/2026

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69492 Alta · 7.0 CWE-122 08/09/2026

Windows Partition Management Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69491 Crítica · 9.8 CWE-122 08/09/2026

Microsoft DirectMusic Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-69490 Média · 6.8 CWE-125 08/09/2026

Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69489 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69488 Alta · 7.0 CWE-416 08/09/2026

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69485 Alta · 8.8 CWE-908 08/09/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVE-2026-69483 Média · 4.7 CWE-125 08/09/2026

Windows Image Acquisition Information Disclosure Vulnerability

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.