Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5232 registro(s), com severidade, exploração e correções.

Windows Server 2025 3000 Windows Server 2025 (Server Core installation) 2996 Windows 11 Version 24H2 2882 Windows 11 Version 25H2 2835 Windows Server 2022 2820 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2666 Windows 10 Version 1809 2600 Windows 10 Version 21H2 2576 Windows 11 version 26H1 2565 Windows 10 Version 22H2 2559 Windows 11 version 23H2 2391 Windows Server 2016 2296 Windows Server 2016 (Server Core installation) 2243 Windows 10 Version 1607 2181 Windows 11 24h2 2141 Windows 11 25h2 2094 Windows 10 1809 1993 Windows 10 21h2 1914 Windows 10 22h2 1900 Windows Server 2012 1854 Windows Server 2012 R2 1817 Windows Server 2012 R2 (Server Core installation) 1808 Windows 11 26h1 1806 Windows 10 1607 1703 Windows Server 2012 (Server Core installation) 1703 Windows 11 23h2 1677 Windows 11 Version 26H2 1007 Microsoft 365 Apps for Enterprise 579 Microsoft Office LTSC 2024 559 Microsoft Office LTSC 2021 556 Windows Server 2022 23h2 544 365 Apps 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Microsoft Office LTSC for Mac 2021 453 Microsoft Office LTSC for Mac 2024 452 Office 2021 434 Office 2024 434 Microsoft Office 2019 386 Microsoft Office 365 for Mac 375

Somente exploradas (KEV) →

CVE-2026-70049 Alta · 8.0 CWE-89 13/10/2026

Microsoft Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-70048 Alta · 7.8 CWE-122 13/10/2026

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70045 Alta · 7.0 CWE-416 13/10/2026

Windows Work Folders Elevation of Privilege Vulnerability

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-70044 Média · 5.5 CWE-125 13/10/2026

Microsoft Windows Media Foundation Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

CVE-2026-70041 Média · 5.5 CWE-126 13/10/2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-70038 Alta · 8.1 CWE-122 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70035 Alta · 8.8 CWE-502 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70033 Alta · 7.5 CWE-401 13/10/2026

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

CVE-2026-70031 Alta · 7.5 CWE-122 13/10/2026

Windows iSCSI Denial of Service Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-70027 Alta · 7.8 CWE-122 13/10/2026

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-70026 Alta · 7.0 CWE-416 13/10/2026

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025 Média · 6.5 CWE-416 13/10/2026

Windows Netlogon Denial of Service Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70024 Crítica · 9.8 CWE-20 13/10/2026

Windows Internet Information Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70023 Alta · 7.8 CWE-416 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021 Alta · 7.0 CWE-416 13/10/2026

Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70017 Média · 5.5 CWE-843 13/10/2026

Windows Secure Kernel Mode Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-70015 Alta · 7.8 CWE-122 13/10/2026

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70014 Alta · 7.5 CWE-416 13/10/2026

Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-70013 Alta · 8.1 CWE-416 13/10/2026

Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70011 Média · 5.5 CWE-125 13/10/2026

Windows IP Over USB Service Information Disclosure Vulnerability

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

CVE-2026-70010 Alta · 7.8 CWE-122 13/10/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008 Alta · 7.8 CWE-190 13/10/2026

Windows IP Over USB Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70007 Alta · 8.8 CWE-787 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70006 Alta · 7.5 CWE-416 13/10/2026

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.