Vulnerabilidades en microsoft
9312 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2025-33072HIGHMicrosoft msagsfeedback.azurewebsites.net Information Disclosure VulnerabilityEPSS 1.4%CVE-2020-16970HIGHAzure Sphere Unsigned Code Execution VulnerabilityEPSS 1.4%CVE-2021-41378HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-27487HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-28277MEDIUMWindows DNS Server Information Disclosure VulnerabilityEPSS 1.4%CVE-2023-21681HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-21732HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-21682MEDIUMWindows Point-to-Point Protocol (PPP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2024-30061HIGHMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 1.4%CVE-2024-21447HIGHWindows Authentication Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2024-21347HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-47171MEDIUMMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-35352HIGHWindows Remote Desktop Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2019-1171MEDIUMSymCrypt Information Disclosure VulnerabilityEPSS 1.4%CVE-2023-32019MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 1.4%CVE-2026-26106HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21291HIGHWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-36004HIGHWindows DPAPI (Data Protection Application Programming Interface) Spoofing VulnerabilityEPSS 1.4%CVE-2021-31188HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2020-0671—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 1.4%