Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5261 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2987 Windows 11 Version 24H2 2873 Windows 11 24h2 2856 Windows 11 Version 25H2 2825 Windows Server 2022 2820 Windows 11 25h2 2808 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2657 Windows 10 1809 2624 Windows 10 Version 1809 2590 Windows 10 Version 21H2 2567 Windows 11 version 26H1 2555 Windows 10 21h2 2551 Windows 10 Version 22H2 2550 Windows 10 22h2 2537 Windows 11 26h1 2516 Windows 11 version 23H2 2383 Windows 11 23h2 2364 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2233 Windows 10 1607 2214 Windows 10 Version 1607 2171 Windows Server 2012 1885 Windows Server 2012 R2 1807 Windows Server 2012 R2 (Server Core installation) 1798 Windows Server 2012 (Server Core installation) 1693 Windows 11 Version 26H2 1007 Windows 11 26h2 980 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 554 Microsoft Office LTSC 2021 551 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 459 Microsoft Office LTSC for Mac 2024 459 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-34345 Alta · 7.0 CWE-362 12/05/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-34344 Alta · 7.8 CWE-843 12/05/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-34343 Alta · 7.8 CWE-122 12/05/2026

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-34342 Alta · 7.0 CWE-362 12/05/2026

Windows Print Spooler Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-34341 Alta · 7.0 CWE-415 12/05/2026

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

CVE-2026-34340 Alta · 7.0 CWE-416 12/05/2026

Windows Projected File System Elevation of Privilege Vulnerability

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-34339 Média · 5.5 CWE-476 12/05/2026

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.

CVE-2026-34338 Alta · 7.8 CWE-416 12/05/2026

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-34337 Alta · 7.0 CWE-362 12/05/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-34336 Alta · 7.8 CWE-122 12/05/2026

Windows DWM Core Library Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-34334 Alta · 7.0 CWE-362 12/05/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-34333 Alta · 7.8 CWE-190 12/05/2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-34332 Alta · 8.0 CWE-416 12/05/2026

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

CVE-2026-34331 Alta · 7.0 CWE-362 12/05/2026

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-34330 Alta · 7.8 CWE-190 12/05/2026

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-34329 Alta · 8.8 CWE-122 12/05/2026

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-33841 Alta · 7.8 CWE-122 12/05/2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-33840 Alta · 7.8 CWE-416 12/05/2026

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-33839 Alta · 7.0 CWE-362 12/05/2026

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-33838 Alta · 7.8 CWE-415 12/05/2026

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-33837 Alta · 7.8 CWE-122 12/05/2026

Windows TCP/IP Local Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-33835 Alta · 7.8 CWE-416 12/05/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-33834 Alta · 7.8 CWE-284 12/05/2026

Windows Event Logging Service Elevation of Privilege Vulnerability

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-33833 Alta · 8.2 CWE-74 12/05/2026

Azure Machine Learning Notebook Spoofing Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-33821 Crítica · 9.9 CWE-269 12/05/2026

Elevação de Privilégios no Microsoft Dynamics 365 Customer Insights

Gestão imprópria de privilégios no Microsoft Dynamics 365 Customer Insights permite que um atacante autorizado eleve privilégios pela rede.