Vulnerabilidades do Microsoft Windows 11 version 23H2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows 11 version 23H2: 2390 registro(s), com versões afetadas e correções.
CVE-2026-85904
Alta · 7.0
CWE-362 13/10/2026
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85903
Alta · 8.8
CWE-822 13/10/2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85902
Alta · 7.8
CWE-122 13/10/2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85901
Alta · 7.8
CWE-122 13/10/2026
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85874
Alta · 7.8
CWE-416 13/10/2026
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
CVE-2026-85872
Alta · 7.8
CWE-416 13/10/2026
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85871
Alta · 7.8
CWE-122 13/10/2026
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-85870
Alta · 7.0
CWE-122 13/10/2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85869
Alta · 7.8
CWE-122 13/10/2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-85868
Alta · 7.0
CWE-416 13/10/2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85867
Alta · 7.8
CWE-122 13/10/2026
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85866
Média · 4.7
CWE-497 13/10/2026
Windows ALPC Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
CVE-2026-85864
Alta · 7.8
CWE-641 13/10/2026
Python Elevation of Privilege Vulnerability
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
CVE-2026-85863
Alta · 7.8
CWE-416 13/10/2026
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85861
Alta · 7.8
CWE-416 13/10/2026
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85860
Alta · 7.8
CWE-416 13/10/2026
Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85859
Média · 6.5
CWE-476 13/10/2026
Windows Message Queuing Queue Manager Denial of Service Vulnerability
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
CVE-2026-85858
Alta · 7.8
CWE-125 13/10/2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85857
Média · 5.5
CWE-532 13/10/2026
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-85856
Alta · 7.1
CWE-122 13/10/2026
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
CVE-2026-85854
Alta · 7.0
CWE-416 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85853
Alta · 7.0
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85852
Média · 5.5
CWE-125 13/10/2026
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-85851
Alta · 7.8
CWE-416 13/10/2026
Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-85849
Alta · 7.8
CWE-59 13/10/2026
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.