Vulnerabilidades en microsoft
9331 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-28902MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-50366MEDIUMWindows Active Directory Domain Services Denial of Service VulnerabilityEPSS 0.8%CVE-2024-26255MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-41051HIGHAzure RTOS GUIX Studio Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-36398MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-40732MEDIUMAn access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of WindEPSS 0.8%CVE-2025-21363HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-36428MEDIUMMicrosoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-36406MEDIUMWindows Hyper-V Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-26791HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0854—An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiEPSS 0.8%CVE-2023-28240HIGHWindows Network Load Balancing Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-26789HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2019-1380—A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of PrivilegEPSS 0.8%CVE-2026-47643CRITICALAzure Stack Edge Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-24513HIGHVisual Studio Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2021-36967HIGHWindows WLAN AutoConfig Service Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-21340MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.8%CVE-2025-47160MEDIUMWindows Shortcut Files Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2019-1447—A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'MicrosofEPSS 0.8%