Vulnerabilidades en microsoft

9329 resultados
Análisis Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2022-30214MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-33135HIGH.NET and Visual Studio Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2024-38211HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 1.0%CVE-2024-43610HIGHCopilot Studio Information Disclosure VulnerabilityEPSS 1.0%CVE-2020-0957—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 1.0%CVE-2019-1316—An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft WindowEPSS 1.0%CVE-2022-29146HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2022-29144HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2022-21847MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 1.0%CVE-2026-23664HIGHAzure IoT Explorer Information Disclosure VulnerabilityEPSS 1.0%CVE-2025-21395HIGHMicrosoft Access Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-56159CRITICALDHCP Server Service Remote Code Execution VulnerabilityEPSS 1.0%CVE-2020-0870HIGHShell infrastructure component Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2025-21383HIGHMicrosoft Excel Information Disclosure VulnerabilityEPSS 1.0%CVE-2020-0838HIGHNTFS Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2023-35635MEDIUMWindows Kernel Denial of Service VulnerabilityEPSS 1.0%CVE-2020-1029—An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaEPSS 1.0%CVE-2020-0998HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-0782HIGHWindows Cryptographic Catalog Services Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2023-36020HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 1.0%