Vulnerabilidades do Microsoft Windows 11 25h2

CVE-2026-73002 Alta · 7.8 CWE-190 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73001 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73000 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72999 Média · 6.8 CWE-125 08/09/2026

Windows USB Hub Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72997 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72996 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72995 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72994 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72993 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72992 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72991 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72990 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72988 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72986 Alta · 8.8 CWE-122 08/09/2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-72985 Média · 6.8 CWE-122 08/09/2026

Volume Shadow Copy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72983 Crítica · 9.8 CWE-416 08/09/2026

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

CVE-2026-72982 Crítica · 9.8 CWE-121 08/09/2026

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CVE-2026-72981 Alta · 8.1 CWE-416 08/09/2026

IP Helper Remote Code Execution Vulnerability

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVE-2026-72980 Média · 5.5 CWE-427 08/09/2026

Windows Hello Security Feature Bypass Vulnerability

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-72967 Alta · 7.8 CWE-122 08/09/2026

Windows Network Connection Broker Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-72966 Média · 5.5 CWE-862 08/09/2026

Windows Remote Access Connection Manager Tampering Vulnerability

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-72965 Alta · 7.8 CWE-416 08/09/2026

Windows WebClient Service Elevation of Privilege Vulnerability

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72964 Média · 5.5 CWE-306 08/09/2026

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

CVE-2026-72963 Alta · 7.0 CWE-416 08/09/2026

Windows Modern Execution Server Elevation of Privilege Vulnerability

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

CVE-2026-72962 Alta · 8.2 CWE-122 08/09/2026

Windows USB Video Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.