Vulnerabilidades do Microsoft Windows 11 24h2

CVE-2026-96951 Alta · 8.8 KEV Alta · 52 CWE-77 13/10/2026

Microsoft Windows Command Injection Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81963 Alta · 7.8 KEV Alta · 46 CWE-59 08/09/2026

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2026-78457 Alta · 7.0 CWE-416 08/09/2026

Windows Security Health Service Elevation of Privilege Vulnerability

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

CVE-2026-78446 Alta · 7.5 CWE-416 08/09/2026

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-69436 Alta · 7.8 CWE-122 08/09/2026

Windows State Repository Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68820 Alta · 7.0 KEV Alta · 51 Exploit público CWE-416 11/08/2026

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-62769 Média · 6.7 CWE-122 11/08/2026

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62712 Alta · 7.8 CWE-122 11/08/2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-58619 Alta · 7.0 CWE-416 14/07/2026

Windows Sensor Data Service Elevation of Privilege Vulnerability

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-57090 Crítica · 9.8 CWE-122 14/07/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-50465 Alta · 7.1 CWE-284 14/07/2026

Windows DNS Client Tampering Vulnerability

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

CVE-2026-50461 Alta · 7.8 CWE-122 14/07/2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-50436 Alta · 7.8 CWE-416 14/07/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50420 Média · 5.5 CWE-125 14/07/2026

HTTP.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.

CVE-2026-50392 Alta · 7.0 CWE-416 14/07/2026

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-50390 Alta · 7.8 CWE-843 14/07/2026

Windows Kernel Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50387 Alta · 7.8 CWE-121 14/07/2026

Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-50331 Alta · 7.8 CWE-416 14/07/2026

Windows Application Model Core API Elevation of Privilege Vulnerability

Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.

CVE-2026-50323 Alta · 7.0 CWE-416 14/07/2026

Windows Runtime Elevation of Privilege Vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-49802 Alta · 7.0 CWE-362 14/07/2026

Windows USB Print Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-49790 Alta · 7.8 CWE-122 14/07/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-49789 Alta · 7.8 CWE-121 14/07/2026

Windows NTFS Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-50507 Média · 6.8 CWE-306 09/06/2026

Windows BitLocker Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-49160 Alta · 7.5 CWE-400 09/06/2026

HTTP.sys Denial of Service Vulnerability

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

CVE-2026-48583 Alta · 7.8 CWE-416 09/06/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.