CVE Intelligence

Vulnerabilidades do Microsoft Windows 11 26h1

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Windows 11 26h1: 1937 registro(s), com versões afetadas e correções.
cpe:2.3:o:microsoft:windows_11_26h1

CVE-2026-83867 Alta · 7.8 CWE-122 13/10/2026
Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83866 Alta · 7.0 CWE-416 13/10/2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83865 Média · 4.7 CWE-23 13/10/2026
Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVE-2026-83864 Média · 5.5 CWE-290 13/10/2026
Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83861 Alta · 7.8 CWE-122 13/10/2026
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-83860 Alta · 7.5 CWE-121 13/10/2026
Windows GDI Denial of Service Vulnerability
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-83859 Alta · 7.8 CWE-416 13/10/2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83857 Alta · 7.8 CWE-121 13/10/2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83856 Alta · 8.1 CWE-125 13/10/2026
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83855 Alta · 7.5 CWE-191 13/10/2026
Windows WLAN Service Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
CVE-2026-83854 Média · 5.5 CWE-306 13/10/2026
Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
CVE-2026-83853 Alta · 7.0 CWE-416 13/10/2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83774 Média · 4.7 CWE-497 13/10/2026
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83768 Alta · 7.8 CWE-122 13/10/2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83761 Alta · 7.8 CWE-416 13/10/2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83756 Alta · 7.8 CWE-416 13/10/2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83642 Alta · 8.8 CWE-843 13/10/2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70303 Alta · 7.8 CWE-787 13/10/2026
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70295 Média · 5.5 CWE-125 13/10/2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70294 Média · 5.5 CWE-20 13/10/2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70293 Média · 5.5 CWE-908 13/10/2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70292 Média · 5.5 CWE-125 13/10/2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70288 Média · 5.5 CWE-367 13/10/2026
Win32k Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70285 Alta · 7.8 CWE-122 13/10/2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70284 Média · 5.5 CWE-908 13/10/2026
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.