Vulnerabilidades do Microsoft Windows 11 24h2

CVE-2026-77892 Média · 6.8 CWE-693 08/09/2026

Windows Boot Manager Elevation of Privilege Vulnerability

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-77504 Alta · 8.8 CWE-415 08/09/2026

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77503 Alta · 7.8 CWE-125 08/09/2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2026-77500 Alta · 7.8 CWE-763 08/09/2026

Windows Device Association Service Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-77495 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77493 Crítica · 9.8 CWE-415 08/09/2026

Windows Graphics Component Remote Code Execution Vulnerability

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77492 Média · 5.5 CWE-125 08/09/2026

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-77491 Média · 5.5 CWE-125 08/09/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-77489 Alta · 7.8 CWE-476 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73026 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73024 Alta · 7.8 CWE-122 08/09/2026

Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-73023 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73022 Alta · 7.0 CWE-416 08/09/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-73021 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73020 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73019 Média · 4.3 CWE-41 08/09/2026

Windows URL Moniker Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-73018 Alta · 8.8 CWE-122 08/09/2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-73017 Alta · 7.5 CWE-122 08/09/2026

Graphics Kernel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2026-73016 Alta · 8.8 CWE-122 08/09/2026

DirectWrite Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73015 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73014 Alta · 7.8 CWE-862 08/09/2026

Data Sharing Service Client Elevation of Privilege Vulnerability

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-73013 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73012 Alta · 8.8 CWE-122 08/09/2026

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-73011 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73009 Crítica · 9.8 CWE-416 08/09/2026

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.