Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5261 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2987 Windows 11 Version 24H2 2873 Windows 11 24h2 2856 Windows 11 Version 25H2 2825 Windows Server 2022 2820 Windows 11 25h2 2808 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2657 Windows 10 1809 2624 Windows 10 Version 1809 2590 Windows 10 Version 21H2 2567 Windows 11 version 26H1 2555 Windows 10 21h2 2551 Windows 10 Version 22H2 2550 Windows 10 22h2 2537 Windows 11 26h1 2516 Windows 11 version 23H2 2383 Windows 11 23h2 2364 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2233 Windows 10 1607 2214 Windows 10 Version 1607 2171 Windows Server 2012 1885 Windows Server 2012 R2 1807 Windows Server 2012 R2 (Server Core installation) 1798 Windows Server 2012 (Server Core installation) 1693 Windows 11 Version 26H2 1007 Windows 11 26h2 980 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 554 Microsoft Office LTSC 2021 551 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 459 Microsoft Office LTSC for Mac 2024 459 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-49791 Alta · 7.8 CWE-59 14/07/2026

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-49788 Alta · 7.5 CWE-770 14/07/2026

HTTP/2 Denial of Service Vulnerability

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

CVE-2026-49787 Alta · 7.5 CWE-770 14/07/2026

HTTP.sys Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

CVE-2026-49790 Alta · 7.8 CWE-122 14/07/2026

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-49789 Alta · 7.8 CWE-121 14/07/2026

Windows NTFS Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-49784 Alta · 7.0 CWE-362 14/07/2026

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

CVE-2026-49783 Alta · 7.8 CWE-358 14/07/2026

Secure Boot Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-49184 Alta · 7.8 CWE-122 14/07/2026

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-49183 Alta · 7.0 CWE-362 14/07/2026

Windows Clipboard Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

CVE-2026-49181 Crítica · 9.8 CWE-191 14/07/2026

Windows DHCP Client Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-49180 Média · 5.5 CWE-59 14/07/2026

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2026-49178 Alta · 8.8 CWE-122 14/07/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-49176 Alta · 7.8 CWE-59 14/07/2026

Windows WalletService Elevation of Privilege Vulnerability

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-49175 Alta · 7.8 CWE-122 14/07/2026

Windows DNS Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-49174 Média · 6.1 CWE-306 14/07/2026

DNS Client Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

CVE-2026-49173 Alta · 7.8 CWE-416 14/07/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49172 Crítica · 9.8 CWE-122 14/07/2026

Windows FTP Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

CVE-2026-49171 Alta · 7.8 CWE-416 14/07/2026

Windows Speech Runtime Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-49170 Alta · 7.8 CWE-285 14/07/2026

Windows StateRepository API Server file Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-49169 Alta · 8.8 CWE-416 14/07/2026

Windows DNS Server Remote Code Execution Vulnerability

Use after free in DNS Server allows an authorized attacker to execute code over a network.

CVE-2026-49168 Média · 6.8 CWE-190 14/07/2026

Storage Spaces Direct Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-49167 Alta · 7.8 CWE-416 14/07/2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49166 Alta · 7.8 CWE-416 14/07/2026

Windows Print Configuration Elevation of Privilege Vulnerability

Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-49165 Alta · 7.1 CWE-908 14/07/2026

Microsoft Windows App Store Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.

CVE-2026-49164 Crítica · 9.8 CWE-122 14/07/2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.