Vulnerabilidades en microsoft
9347 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-49052HIGHMicrosoft Azure PolicyWatch Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2018-8356—A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET FrEPSS 0.7%CVE-2024-21432HIGHWindows Update Stack Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2021-41347HIGHWindows AppX Deployment Service Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-48582CRITICALMicrosoft Exchange Online Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-35355HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-53787HIGHMicrosoft 365 Copilot BizChat Information Disclosure VulnerabilityEPSS 0.7%CVE-2023-35374HIGHPaint 3D Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-24944MEDIUMWindows Bluetooth Driver Information Disclosure VulnerabilityEPSS 0.7%CVE-2025-26643MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.7%CVE-2023-36869MEDIUMAzure DevOps Server Spoofing VulnerabilityEPSS 0.7%CVE-2026-45481HIGHMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 0.7%CVE-2024-38043HIGHPowerShell Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-29125HIGHWindows Push Notifications Apps Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-54906HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-43612MEDIUMPower BI Report Server Spoofing VulnerabilityEPSS 0.7%CVE-2025-21396HIGHMicrosoft Account Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-36046HIGHWindows Authentication Denial of Service VulnerabilityEPSS 0.7%CVE-2023-28313MEDIUMMicrosoft Dynamics 365 Customer Voice Cross-Site Scripting VulnerabilityEPSS 0.7%CVE-2025-49715HIGHDynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityEPSS 0.7%