Vulnerabilidades en microsoft

9347 resultados
Análisis Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-36705HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-29803HIGHVisual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-43497HIGHDeepSpeed Remote Code Execution VulnerabilityEPSS 0.7%CVE-2021-28438MEDIUMWindows Console Driver Denial of Service VulnerabilityEPSS 0.7%CVE-2024-38203MEDIUMWindows Package Library Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-21845MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-23264MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.7%CVE-2024-26237HIGHWindows Defender Credential Guard Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-43526MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-43525MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-28901MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-29994HIGHMicrosoft Windows SCSI Class System File Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-23421HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-46402HIGHMicrosoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directoryEPSS 0.7%CVE-2024-28900MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2023-33171HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.7%CVE-2025-47158CRITICALAzure DevOps Server Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-38047HIGHPowerShell Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-21322HIGHMicrosoft PC Manager Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-21753MEDIUMEvent Tracing for Windows Information Disclosure VulnerabilityEPSS 0.7%