Vulnerabilidades do Microsoft Windows 11 Version 26H2

CVE-2026-61931 Alta · 7.8 CWE-416 13/10/2026

Windows Perception Simulation Service Elevation of Privilege Vulnerability

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

CVE-2026-49785 Alta · 7.8 CWE-404 13/10/2026

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-108468 Alta · 7.0 CWE-416 13/10/2026

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-108467 Alta · 8.8 CWE-122 13/10/2026

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

CVE-2026-108466 Média · 5.3 CWE-125 13/10/2026

Windows Kernel Denial of Service Vulnerability

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-108465 Alta · 7.0 CWE-416 13/10/2026

Windows Update Delivery Optimization Elevation of Privilege Vulnerability

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.

CVE-2026-108464 Alta · 7.0 CWE-416 13/10/2026

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

CVE-2026-108463 Alta · 8.8 CWE-41 13/10/2026

Windows SmartScreen Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-108462 Média · 5.5 CWE-497 13/10/2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-108461 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-108460 Alta · 8.1 CWE-416 13/10/2026

Windows Message Queuing Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-108399 Alta · 7.2 CWE-122 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-108396 Alta · 7.0 CWE-367 13/10/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-108136 Alta · 7.8 CWE-416 13/10/2026

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-108135 Alta · 7.0 CWE-59 13/10/2026

Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-108134 Alta · 7.0 CWE-416 13/10/2026

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-108131 Alta · 7.5 CWE-295 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-108130 Alta · 7.8 CWE-122 13/10/2026

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-108129 Média · 6.5 CWE-125 13/10/2026

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-108128 Média · 6.5 CWE-125 13/10/2026

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-108127 Média · 6.5 CWE-125 13/10/2026

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-105733 Alta · 8.8 13/10/2026

Windows Hyper-V Remote Code Execution Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-105723 Alta · 7.5 CWE-822 13/10/2026

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-105722 Alta · 7.0 CWE-416 13/10/2026

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-105016 Crítica · 9.8 CWE-122 13/10/2026

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.