Vulnerabilidades do Microsoft Windows 11 version 26H1

CVE-2026-62801 Média · 6.5 CWE-22 08/09/2026

Microsoft PowerShell Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62762 Média · 6.5 CWE-476 08/09/2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-62759 Alta · 7.5 CWE-290 08/09/2026

Windows Netlogon Spoofing Vulnerability

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-62744 Alta · 8.8 CWE-122 08/09/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-62706 Alta · 8.8 CWE-121 08/09/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-62697 Alta · 7.8 CWE-416 08/09/2026

Windows Push Notifications Elevation of Privilege Vulnerability

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-62694 Alta · 7.0 CWE-416 08/09/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-56198 Alta · 7.8 CWE-125 08/09/2026

Microsoft Trace Data Helper Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVE-2026-56177 Alta · 7.8 CWE-416 08/09/2026

Windows Server Elevation of Privilege Vulnerability

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

CVE-2026-56172 Alta · 7.8 CWE-416 08/09/2026

Windows VHD miniport driver Elevation of Privilege Vulnerability

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-50349 Alta · 7.0 CWE-362 08/09/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-62727 Alta · 7.0 CWE-362 19/08/2026

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72971 Média · 5.5 CWE-59 11/08/2026

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

CVE-2026-70348 Média · 5.5 CWE-59 11/08/2026

Windows Management Services Denial of Service Vulnerability

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.

CVE-2026-70347 Alta · 7.8 CWE-122 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70346 Alta · 7.8 CWE-121 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70345 Alta · 7.8 CWE-122 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70344 Alta · 7.8 CWE-121 11/08/2026

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70330 Alta · 7.8 CWE-122 11/08/2026

Windows DNS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70307 Alta · 7.0 CWE-416 11/08/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70304 Alta · 7.8 CWE-122 11/08/2026

Windows DNS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-68820 Alta · 7.0 KEV Alta · 51 Exploit público CWE-416 11/08/2026

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-66804 Alta · 7.8 CWE-284 11/08/2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

CVE-2026-66802 Alta · 8.1 CWE-362 11/08/2026

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

CVE-2026-66799 Alta · 7.8 CWE-122 11/08/2026

Windows Key Guard Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.