Vulnerabilidades do Microsoft Windows 11 26h1

CVE-2026-96917 Alta · 8.8 CWE-122 13/10/2026

Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96916 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96915 Alta · 7.8 CWE-190 13/10/2026

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96909 Crítica · 9.8 CWE-122 13/10/2026

Windows BitLocker Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

CVE-2026-96857 Média · 5.5 CWE-552 13/10/2026

Windows Projected File System Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-96856 Alta · 7.8 CWE-122 13/10/2026

Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96855 Média · 5.5 CWE-862 13/10/2026

Windows Modern Device Management (MDM) Tampering Vulnerability

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96854 Média · 5.5 CWE-843 13/10/2026

Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-96853 Média · 4.7 CWE-367 13/10/2026

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96852 Alta · 7.0 CWE-416 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96851 Média · 5.5 CWE-126 13/10/2026

Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-96850 Média · 5.5 CWE-170 13/10/2026

Windows Modern Device Management (MDM) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

CVE-2026-96849 Média · 5.5 CWE-908 13/10/2026

Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96847 Alta · 7.8 CWE-822 13/10/2026

WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96846 Média · 5.5 CWE-125 13/10/2026

WebDAV Information Disclosure Vulnerability

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-96844 Alta · 8.0 CWE-191 13/10/2026

Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-96843 Alta · 7.8 CWE-122 13/10/2026

WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96325 Alta · 7.5 CWE-771 13/10/2026

Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-96324 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96323 Alta · 7.0 CWE-416 13/10/2026

Windows Update Elevation of Privilege Vulnerability

Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-96322 Alta · 7.0 CWE-416 13/10/2026

Windows Remote Desktop Protocol Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-96321 Média · 5.5 CWE-125 13/10/2026

Remote Desktop Display Driver Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

CVE-2026-96319 Alta · 7.0 CWE-416 13/10/2026

Windows USB Print Driver Elevation of Privilege Vulnerability

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96318 Alta · 7.8 CWE-122 13/10/2026

Windows Resume Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

CVE-2026-96317 Alta · 7.8 CWE-416 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.