Vulnerabilidades en microsoft
9326 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2020-0865—An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoEPSS 1.0%CVE-2020-1418—An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to aEPSS 1.0%CVE-2023-33153MEDIUMMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 1.0%CVE-2020-0800—An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoEPSS 1.0%CVE-2023-36436HIGHWindows MSHTML Platform Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36762HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-29801HIGHMicrosoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2025-29800HIGHMicrosoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2019-1041HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2025-62473MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-59860HIGHKiota: XML Doc-Comment Newline Breakout Code InjectionEPSS 1.0%CVE-2026-59859HIGHKiota: Code Generation Literal Injection in the PHP GeneratorEPSS 1.0%CVE-2026-26122MEDIUMMicrosoft ACI Confidential Containers Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-21218HIGH.NET Spoofing VulnerabilityEPSS 1.0%CVE-2026-48579CRITICALMicrosoft Exchange Online Information Disclosure VulnerabilityEPSS 1.0%CVE-2019-1044MEDIUMWindows Secure Kernel Mode Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2019-1320—An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of EPSS 1.0%CVE-2024-29056MEDIUMWindows Authentication Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2025-62214MEDIUMVisual Studio Remote Code Execution VulnerabilityEPSS 1.0%CVE-2020-0843—An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioEPSS 1.0%