Vulnerabilidades en microsoft
9312 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-37320HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-35256HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37321HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37324HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2020-16940HIGHWindows - User Profile Service Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2019-1261—A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-siEPSS 1.6%CVE-2024-30056HIGHMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityEPSS 1.6%CVE-2026-32203HIGH.NET and Visual Studio Denial of Service VulnerabilityEPSS 1.6%CVE-2020-0694MEDIUMA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesEPSS 1.6%CVE-2026-27908HIGHWindows TDI Translation Driver (tdx.sys) Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2025-21178HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-21762HIGHMicrosoft Exchange Server Spoofing VulnerabilityEPSS 1.6%CVE-2025-33057MEDIUMWindows Local Security Authority (LSA) Denial of Service VulnerabilityEPSS 1.5%CVE-2025-55241CRITICALAzure Entra ID Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2024-21369HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.5%CVE-2019-1273—A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error EPSS 1.5%CVE-2023-21563MEDIUMBitLocker Security Feature Bypass VulnerabilityEPSS 1.5%CVE-2021-41337MEDIUMActive Directory Security Feature Bypass VulnerabilityEPSS 1.5%CVE-2020-0795MEDIUMThis vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.EPSS 1.5%CVE-2021-40457HIGHMicrosoft Dynamics 365 Customer Engagement Cross-Site Scripting VulnerabilityEPSS 1.5%