Vulnerabilidades do Microsoft Windows 11 Version 25H2

CVE-2026-83969 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83968 Alta · 7.8 CWE-400 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83967 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83955 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83954 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83952 Alta · 7.8 CWE-122 08/09/2026

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83942 Alta · 7.8 CWE-862 08/09/2026

Windows Kernel Elevation of Privilege Vulnerability

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83940 Alta · 7.0 CWE-416 08/09/2026

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83501 Média · 5.5 CWE-125 08/09/2026

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

CVE-2026-83498 Alta · 7.8 CWE-822 08/09/2026

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-81963 Alta · 7.8 KEV Alta · 46 CWE-59 08/09/2026

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2026-81955 Alta · 8.8 CWE-122 08/09/2026

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-81355 Alta · 7.8 CWE-122 08/09/2026

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

CVE-2026-81354 Alta · 8.2 CWE-122 08/09/2026

Windows Hello Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-80096 Alta · 8.8 CWE-125 08/09/2026

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-80093 Alta · 7.0 CWE-416 08/09/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-80083 Alta · 8.8 CWE-822 08/09/2026

Windows Hyper-V Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-80075 Alta · 7.8 CWE-122 08/09/2026

Windows Work Folders Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-78516 Média · 4.3 CWE-126 08/09/2026

Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

CVE-2026-78508 Média · 4.6 CWE-125 08/09/2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78464 Alta · 7.0 CWE-367 08/09/2026

Windows MIDI Service Module Elevation of Privileges Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-78455 Média · 4.3 CWE-125 08/09/2026

Xbox Information Disclosure Vulnerability

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78457 Alta · 7.0 CWE-416 08/09/2026

Windows Security Health Service Elevation of Privilege Vulnerability

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

CVE-2026-78454 Média · 5.5 CWE-125 08/09/2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-78453 Média · 6.5 CWE-191 08/09/2026

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.