Aller au contenu

Vulnérabilités connues pour Microsoft Windows 11 version 26H1

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-70122 Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to… 6.5 Moyenne 13 oct. 2026
CVE-2026-70084 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally 5.5 Moyenne 13 oct. 2026
CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally 7.8 Élevée 13 oct. 2026
CVE-2026-70148 Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information… 6.5 Moyenne 13 oct. 2026
CVE-2026-69884 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-69902 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally 6.7 Moyenne 13 oct. 2026
CVE-2026-88191 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an… 7.8 Élevée 13 oct. 2026
CVE-2026-88182 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88193 Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88121 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.0 Élevée 13 oct. 2026
CVE-2026-88133 Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges… 7.8 Élevée 13 oct. 2026
CVE-2026-88142 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.8 Élevée 13 oct. 2026
CVE-2026-88135 Improper access control in WebDAV allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88147 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-88118 Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker… 7.8 Élevée 13 oct. 2026
CVE-2026-88128 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026
CVE-2026-88149 Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88139 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88141 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88152 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-87702 Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-87715 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88079 Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88113 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally 7.0 Élevée 13 oct. 2026
CVE-2026-88134 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 13 oct. 2026

Autres produits Microsoft