Vulnerabilidades do Microsoft Windows 11 version 26H1

CVE-2026-83654 Alta · 7.8 CWE-306 13/10/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-83652 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83651 Média · 6.5 CWE-125 13/10/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

CVE-2026-83650 Alta · 7.8 CWE-122 13/10/2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83649 Média · 6.5 CWE-125 13/10/2026

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

CVE-2026-83648 Média · 6.5 CWE-476 13/10/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83647 Alta · 7.5 CWE-125 13/10/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

CVE-2026-83644 Alta · 7.0 CWE-416 13/10/2026

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83643 Alta · 8.8 CWE-121 13/10/2026

Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83642 Alta · 8.8 CWE-843 13/10/2026

Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83641 Alta · 7.8 CWE-122 13/10/2026

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639 Alta · 7.8 CWE-122 13/10/2026

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638 Alta · 7.8 CWE-122 13/10/2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83636 Média · 6.5 CWE-476 13/10/2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-83634 Alta · 7.8 CWE-415 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-83588 Alta · 7.8 CWE-122 13/10/2026

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 Alta · 7.8 CWE-822 13/10/2026

Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83586 Alta · 7.8 CWE-1390 13/10/2026

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 Alta · 7.8 CWE-134 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83584 Alta · 7.0 CWE-416 13/10/2026

Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 Alta · 7.8 CWE-862 13/10/2026

Windows Geotag Broker Elevation of Privilege Vulnerability

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-83582 Média · 4.7 CWE-416 13/10/2026

Windows Graphics Kernel Information Disclosure Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-83580 Alta · 7.0 CWE-122 13/10/2026

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83579 Alta · 7.8 CWE-122 13/10/2026

Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.