Vulnerabilidades do Microsoft Windows 11 Version 25H2

CVE-2026-83702 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83701 Alta · 7.0 CWE-416 13/10/2026

Windows Now Playing Session Manager Elevation of Privilege Vulnerability

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83700 Alta · 7.8 CWE-416 13/10/2026

Windows Now Playing Session Manager Elevation of Privilege Vulnerability

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83699 Alta · 7.8 CWE-121 13/10/2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83698 Alta · 7.8 CWE-122 13/10/2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83697 Média · 4.7 CWE-367 13/10/2026

Windows Modern Device Management (MDM) Tampering Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-83696 Alta · 7.0 CWE-416 13/10/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83695 Média · 5.5 CWE-908 13/10/2026

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-83694 Alta · 7.0 CWE-125 13/10/2026

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83693 Crítica · 9.8 CWE-122 13/10/2026

Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83692 Alta · 7.8 CWE-122 13/10/2026

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83691 Alta · 7.8 CWE-122 13/10/2026

Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83690 Alta · 7.8 CWE-416 13/10/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83689 Alta · 7.0 CWE-416 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83688 Alta · 8.8 CWE-122 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-83687 Alta · 7.0 CWE-416 13/10/2026

Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-83686 Média · 5.5 CWE-125 13/10/2026

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-83685 Média · 6.5 CWE-126 13/10/2026

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

CVE-2026-83683 Média · 6.5 CWE-36 13/10/2026

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

CVE-2026-83682 Alta · 7.0 CWE-416 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83680 Alta · 7.0 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83679 Alta · 7.8 CWE-416 13/10/2026

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83678 Alta · 7.8 CWE-122 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83677 Alta · 7.5 CWE-401 13/10/2026

Windows DHCP Client Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

CVE-2026-83676 Alta · 7.0 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.