Vulnerabilidades do Microsoft Windows 11 26h1

CVE-2026-61939 Alta · 7.0 CWE-416 11/08/2026

Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-61938 Alta · 7.0 CWE-416 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61937 Alta · 7.8 CWE-122 11/08/2026

Windows HTTP.sys Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-61936 Média · 5.5 CWE-862 11/08/2026

Windows Defender Firewall Service Security Feature Bypass Vulnerability

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-61934 Alta · 7.8 CWE-416 11/08/2026

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61933 Média · 5.5 CWE-125 11/08/2026

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-61930 Alta · 7.8 CWE-122 11/08/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61929 Alta · 7.0 CWE-416 11/08/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61928 Média · 5.5 CWE-312 11/08/2026

Windows Hello Tampering Vulnerability

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

CVE-2026-61927 Alta · 7.0 CWE-362 11/08/2026

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61926 Alta · 7.8 CWE-122 11/08/2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61925 Alta · 7.8 CWE-863 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61924 Alta · 7.5 CWE-125 11/08/2026

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61923 Alta · 7.8 CWE-122 11/08/2026

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61921 Média · 6.5 CWE-125 11/08/2026

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61920 Média · 6.6 CWE-362 11/08/2026

Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-61918 Alta · 7.5 CWE-125 11/08/2026

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61368 Média · 5.5 CWE-122 11/08/2026

Windows Hyper-V Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-61367 Alta · 7.8 CWE-306 11/08/2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61366 Alta · 7.0 CWE-415 11/08/2026

Windows Network Connection Broker Elevation of Privilege Vulnerability

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-61365 Alta · 7.8 CWE-306 11/08/2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364 Alta · 7.8 CWE-306 11/08/2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61363 Alta · 8.1 CWE-20 11/08/2026

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61361 Alta · 7.0 CWE-416 11/08/2026

Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

CVE-2026-61360 Média · 5.5 CWE-822 11/08/2026

Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.