Vulnerabilidades do Microsoft Windows 11 23h2

CVE-2026-88191 Alta · 7.8 CWE-59 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88189 Alta · 7.8 CWE-125 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88188 Alta · 7.8 CWE-125 13/10/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88182 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88116 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88114 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88112 Alta · 8.8 CWE-822 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88105 Alta · 7.8 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88103 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88101 Alta · 7.8 CWE-1390 13/10/2026

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88098 Alta · 7.0 CWE-822 13/10/2026

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-88096 Alta · 7.0 CWE-362 13/10/2026

Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 Alta · 7.8 CWE-122 13/10/2026

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88091 Alta · 7.8 CWE-502 13/10/2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080 Alta · 7.8 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 Alta · 7.0 CWE-476 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88074 Alta · 7.8 CWE-190 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-88073 Alta · 7.8 CWE-416 13/10/2026

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88072 Alta · 7.8 CWE-59 13/10/2026

Windows Host Guardian Service Elevation of Privilege Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88071 Alta · 7.8 CWE-415 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 Alta · 7.8 CWE-125 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87716 Alta · 7.5 CWE-122 13/10/2026

Windows Storage Spaces Controller Denial of Service Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

CVE-2026-87715 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87714 Média · 6.5 CWE-862 13/10/2026

WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-87713 Alta · 7.5 CWE-416 13/10/2026

Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.