Vulnerabilidades en microsoft
9329 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2020-1547HIGHWindows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-56197HIGHWindows Admin Center (WAC) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-1336HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1393—An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input,EPSS 0.9%CVE-2026-50649HIGH.NET Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-16887HIGHWindows Network Connections Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-35336MEDIUMWindows MSHTML Platform Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2023-21722MEDIUM.NET Framework Denial of Service VulnerabilityEPSS 0.9%CVE-2025-49717HIGHMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-24479HIGHConnected User Experiences and Telemetry Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-21365HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-0647—A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office EPSS 0.9%CVE-2020-17026HIGHWindows Remote Access Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-26630HIGHMicrosoft Access Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-56188CRITICALWindows Server Network driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-26201MEDIUMMicrosoft Intune Linux Agent Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-21734HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-20659HIGHWindows Hyper-V Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2026-54733CRITICALmoodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpointEPSS 0.9%CVE-2020-0719—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 0.9%