Vulnerabilidades em microsoft

9.329 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-23421HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-46402HIGHMicrosoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directoryEPSS 0.7%CVE-2024-29994HIGHMicrosoft Windows SCSI Class System File Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-28900MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-28901MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2025-21322HIGHMicrosoft PC Manager Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-21863HIGHWindows StateRepository API Server file Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-33171HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.7%CVE-2024-38047HIGHPowerShell Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-58275CRITICALAzure DNS Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-21753MEDIUMEvent Tracing for Windows Information Disclosure VulnerabilityEPSS 0.7%CVE-2023-28314MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.7%CVE-2025-47158CRITICALAzure DevOps Server Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-21867HIGHWindows Push Notifications Apps Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-49172CRITICALWindows FTP Service Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-42990CRITICALSQL Server ODBC driver Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-40376HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-24465LOWMicrosoft Intune Portal for iOS Security Feature Bypass VulnerabilityEPSS 0.7%CVE-2025-55248MEDIUM.NET, .NET Framework, and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%CVE-2023-28226MEDIUMWindows Enroll Engine Security Feature Bypass VulnerabilityEPSS 0.7%