Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5261 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2987 Windows 11 Version 24H2 2873 Windows 11 24h2 2856 Windows 11 Version 25H2 2825 Windows Server 2022 2820 Windows 11 25h2 2808 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2657 Windows 10 1809 2624 Windows 10 Version 1809 2590 Windows 10 Version 21H2 2567 Windows 11 version 26H1 2555 Windows 10 21h2 2551 Windows 10 Version 22H2 2550 Windows 10 22h2 2537 Windows 11 26h1 2516 Windows 11 version 23H2 2383 Windows 11 23h2 2364 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2233 Windows 10 1607 2214 Windows 10 Version 1607 2171 Windows Server 2012 1885 Windows Server 2012 R2 1807 Windows Server 2012 R2 (Server Core installation) 1798 Windows Server 2012 (Server Core installation) 1693 Windows 11 Version 26H2 1007 Windows 11 26h2 980 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 554 Microsoft Office LTSC 2021 551 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 459 Microsoft Office LTSC for Mac 2024 459 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-32070 Alta · 7.0 CWE-416 14/04/2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-32069 Alta · 7.8 CWE-415 14/04/2026

Windows Projected File System Elevation of Privilege Vulnerability

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-32068 Alta · 7.0 CWE-362 14/04/2026

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

CVE-2026-27931 Média · 5.5 CWE-125 14/04/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-27930 Média · 5.5 CWE-125 14/04/2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-27929 Alta · 7.0 CWE-367 14/04/2026

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-27928 Alta · 8.7 CWE-20 14/04/2026

Windows Hello Security Feature Bypass Vulnerability

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-27927 Alta · 7.0 CWE-362 14/04/2026

Windows Projected File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-27926 Alta · 7.0 CWE-362 14/04/2026

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-27925 Média · 6.5 CWE-416 14/04/2026

Windows UPnP Device Host Information Disclosure Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2026-27924 Alta · 7.8 CWE-416 14/04/2026

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-27923 Alta · 7.8 CWE-416 14/04/2026

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-27922 Alta · 7.0 CWE-416 14/04/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-27921 Alta · 7.0 CWE-362 14/04/2026

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-27920 Alta · 7.8 CWE-822 14/04/2026

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27919 Alta · 7.8 CWE-822 14/04/2026

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27918 Alta · 7.0 CWE-362 14/04/2026

Windows Shell Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-27917 Alta · 7.0 CWE-416 14/04/2026

Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-27916 Alta · 7.8 CWE-416 14/04/2026

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27915 Alta · 7.8 CWE-416 14/04/2026

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27914 Alta · 7.8 CWE-284 14/04/2026

Microsoft Management Console Elevation of Privilege Vulnerability

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

CVE-2026-27913 Alta · 7.7 CWE-20 14/04/2026

Windows BitLocker Security Feature Bypass Vulnerability

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-27912 Alta · 8.0 CWE-285 14/04/2026

Windows Kerberos Elevation of Privilege Vulnerability

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-27911 Alta · 7.8 CWE-362 14/04/2026

Windows User Interface Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

CVE-2026-27910 Alta · 7.8 CWE-280 14/04/2026

Windows Installer Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.