Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5245 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2997 Windows 11 Version 24H2 2883 Windows 11 Version 25H2 2835 Windows Server 2022 2820 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2666 Windows 10 Version 1809 2600 Windows 11 24h2 2580 Windows 10 Version 21H2 2576 Windows 11 version 26H1 2565 Windows 10 Version 22H2 2559 Windows 11 25h2 2532 Windows 11 version 23H2 2391 Windows 10 1809 2379 Windows 10 21h2 2299 Windows Server 2016 2297 Windows 10 22h2 2285 Windows Server 2016 (Server Core installation) 2243 Windows 11 26h1 2240 Windows 10 Version 1607 2181 Windows 11 23h2 2100 Windows 10 1607 2021 Windows Server 2012 1874 Windows Server 2012 R2 1817 Windows Server 2012 R2 (Server Core installation) 1808 Windows Server 2012 (Server Core installation) 1703 Windows 11 Version 26H2 1007 Windows 11 26h2 707 Microsoft 365 Apps for Enterprise 577 365 Apps 575 Microsoft Office LTSC 2024 557 Microsoft Office LTSC 2021 554 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 451 Microsoft Office LTSC for Mac 2024 450 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-62797 Alta · 7.8 CWE-122 11/08/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62796 Média · 5.5 CWE-125 11/08/2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62795 Alta · 8.8 CWE-416 11/08/2026

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62793 Média · 5.5 CWE-126 11/08/2026

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62792 Alta · 8.1 CWE-121 11/08/2026

Windows TCP/IP Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-62790 Alta · 8.8 CWE-122 11/08/2026

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62788 Alta · 7.0 CWE-416 11/08/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62787 Alta · 7.5 CWE-416 11/08/2026

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-62786 Média · 5.5 CWE-125 11/08/2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62785 Alta · 8.8 CWE-122 11/08/2026

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62784 Alta · 8.8 CWE-122 11/08/2026

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

CVE-2026-62783 Alta · 7.8 CWE-122 11/08/2026

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62782 Alta · 7.5 CWE-125 11/08/2026

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-62781 Alta · 8.1 CWE-122 11/08/2026

RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-62780 Alta · 7.0 CWE-362 11/08/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62779 Alta · 7.8 CWE-416 11/08/2026

Windows Schannel Elevation of Privilege Vulnerability

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-62778 Alta · 8.1 CWE-362 11/08/2026

Windows DNS Elevation of Privilege Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62777 Alta · 7.8 CWE-306 11/08/2026

Windows License Manager Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62776 Alta · 7.8 CWE-59 11/08/2026

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62775 Média · 5.5 CWE-863 11/08/2026

Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.

CVE-2026-62774 Alta · 7.0 CWE-416 11/08/2026

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62773 Alta · 7.0 CWE-416 11/08/2026

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62772 Alta · 7.8 CWE-122 11/08/2026

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-62771 Alta · 7.8 CWE-122 11/08/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62770 Alta · 7.8 CWE-122 11/08/2026

Windows Shell Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.