Vulnerabilidades do Microsoft Windows 11 version 26H1

CVE-2026-69721 Média · 5.5 CWE-125 13/10/2026

Windows iSCSI Information Disclosure Vulnerability

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69718 Alta · 7.8 CWE-77 13/10/2026

Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69705 Crítica · 9.8 CWE-787 13/10/2026

Microsoft Windows iSCSI: escrita fora dos limites com execução de código pela rede

Escrita fora dos limites (out-of-bounds write) no Windows iSCSI permite que um atacante não autorizado execute código pela rede.

CVE-2026-69673 Alta · 7.8 CWE-59 13/10/2026

Windows Update Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69650 Alta · 7.8 CWE-347 13/10/2026

Windows Key Distribution Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

CVE-2026-69644 Média · 5.5 CWE-497 13/10/2026

Windows iSCSI Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69640 Média · 5.3 CWE-863 13/10/2026

Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

CVE-2026-69639 Crítica · 9.8 CWE-122 13/10/2026

Estouro de buffer baseado em heap com execução remota de código no libarchive do Windows

Estouro de buffer baseado em heap no Windows Libarchive permite que um atacante não autorizado execute código pela rede.

CVE-2026-69635 Média · 6.6 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-69634 Crítica · 9.8 CWE-122 13/10/2026

Estouro de heap no Windows iSCSI (CVE-2026-69634)

Estouro de buffer baseado em heap no Windows iSCSI permite que um atacante não autorizado execute código pela rede.

CVE-2026-69633 Alta · 7.8 CWE-122 13/10/2026

Windows Update Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69596 Alta · 7.0 CWE-416 13/10/2026

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69521 Alta · 8.8 CWE-190 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69506 Média · 4.7 CWE-125 13/10/2026

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-69471 Alta · 7.8 CWE-122 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69452 Alta · 7.1 CWE-416 13/10/2026

Windows Enterprise App Management Elevation of Privilege Vulnerability

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-69387 Alta · 7.0 CWE-416 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69363 Alta · 8.0 CWE-122 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVE-2026-69354 Alta · 7.8 CWE-122 13/10/2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69326 Alta · 8.8 CWE-122 13/10/2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-68836 Alta · 7.8 CWE-122 13/10/2026

Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

CVE-2026-62879 Média · 5.5 CWE-306 13/10/2026

Windows SmartScreen Tampering Vulnerability

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.

CVE-2026-62687 Média · 5.5 CWE-59 13/10/2026

Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

CVE-2026-59116 Média · 6.8 CWE-327 13/10/2026

Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-49785 Alta · 7.8 CWE-404 13/10/2026

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.