Vulnerabilidades do Microsoft Windows 11 version 23H2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows 11 version 23H2: 2391 registro(s), com versões afetadas e correções.
CVE-2026-47652
Alta · 8.2
CWE-122 09/06/2026
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-47648
Alta · 7.0
CWE-426 09/06/2026
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-47291
Crítica · 9.8
CWE-122 09/06/2026
Execução remota de código no HTTP.sys do Microsoft Windows
Estouro de inteiro (integer overflow) ou wraparound no Windows HTTP.sys permite que um atacante não autorizado execute código por meio da rede.
CVE-2026-47289
Alta · 8.8
CWE-122 09/06/2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-45658
Média · 6.8
CWE-284 09/06/2026
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
CVE-2026-45657
Crítica · 9.8
CWE-122 09/06/2026
Execução Remota de Código por Use-After-Free no Kernel do Microsoft Windows (CVE-2026-45657)
Uso após liberação (use after free) no Kernel do Windows permite que um atacante não autorizado execute código pela rede.
CVE-2026-45656
Alta · 7.8
CWE-693 09/06/2026
UEFI Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.
CVE-2026-45655
Média · 5.3
CWE-693 09/06/2026
Windows BitLocker Security Feature Bypass Vulnerability
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-45653
Alta · 7.0
CWE-416 09/06/2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-45642
Baixa · 3.9
CWE-20 09/06/2026
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
CVE-2026-45641
Alta · 7.8
CWE-125 09/06/2026
Windows Hyper-V Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.
CVE-2026-45640
Alta · 7.0
CWE-416 09/06/2026
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-45639
Alta · 7.5
CWE-125 09/06/2026
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-45638
Alta · 7.8
CWE-122 09/06/2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-45637
Alta · 7.8
CWE-416 09/06/2026
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-45636
Alta · 7.8
CWE-20 09/06/2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-45635
Alta · 8.1
CWE-416 09/06/2026
Windows UPnP Device Host Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.
CVE-2026-45634
Média · 5.5
CWE-125 09/06/2026
Windows DHCP Client Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
CVE-2026-45608
Média · 6.8
CWE-125 09/06/2026
Windows DHCP Client Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
CVE-2026-45607
Alta · 7.8
CWE-125 09/06/2026
Windows Hyper-V Remote Code Execution Vulnerability
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
CVE-2026-45606
Média · 5.5
CWE-125 09/06/2026
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.
CVE-2026-45605
Alta · 7.8
CWE-416 09/06/2026
Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-45604
Média · 5.5
CWE-125 09/06/2026
Windows Managed Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-45603
Alta · 7.0
CWE-416 09/06/2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-45602
Crítica · 9.1
CWE-349 09/06/2026
Vulnerabilidade de adulteração no Microsoft Windows DHCP Server (CVE-2026-45602)
Nenhum CWE para este problema no Windows DHCP Server permite que um atacante não autorizado realize adulteração pela rede.