Vulnerabilidades do Microsoft Windows 11 Version 25H2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows 11 Version 25H2: 2835 registro(s), com versões afetadas e correções.
CVE-2026-83675
Alta · 7.0
CWE-416 13/10/2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83672
Média · 4.7
CWE-497 13/10/2026
Windows Installer Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-83671
Média · 6.5
CWE-125 13/10/2026
Windows Hyper-V Information Disclosure Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-83670
Alta · 7.5
CWE-125 13/10/2026
Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
CVE-2026-83669
Alta · 7.8
CWE-908 13/10/2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83668
Média · 5.5
CWE-125 13/10/2026
Windows WLAN Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
CVE-2026-83667
Média · 6.5
CWE-125 13/10/2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83664
Média · 5.5
CWE-843 13/10/2026
Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
CVE-2026-83659
Alta · 7.8
CWE-59 13/10/2026
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83658
Média · 5.5
CWE-862 13/10/2026
Windows Error Reporting Information Disclosure Vulnerability
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83656
Média · 4.7
CWE-306 13/10/2026
Windows Modern Device Management (MDM) Tampering Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-83655
Alta · 7.5
CWE-125 13/10/2026
Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83654
Alta · 7.8
CWE-306 13/10/2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-83652
Alta · 7.8
CWE-122 13/10/2026
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83651
Média · 6.5
CWE-125 13/10/2026
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83650
Alta · 7.8
CWE-122 13/10/2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83649
Média · 6.5
CWE-125 13/10/2026
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2026-83648
Média · 6.5
CWE-476 13/10/2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83647
Alta · 7.5
CWE-125 13/10/2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVE-2026-83644
Alta · 7.0
CWE-416 13/10/2026
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83643
Alta · 8.8
CWE-121 13/10/2026
Windows Error Reporting Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83642
Alta · 8.8
CWE-843 13/10/2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83641
Alta · 7.8
CWE-122 13/10/2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83640
Alta · 7.8
CWE-122 13/10/2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83639
Alta · 7.8
CWE-122 13/10/2026
Windows Sensor Data Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.