Exposure of Windows Server

Operating systems
1,432
exposure score
228,411
sites use
32
exploited
3
critical
Vexday analysis

Windows Server acumula 831 CVEs catalogadas, das quais 33 estão confirmadas em exploração ativa no catálogo KEV da CISA — uma taxa 8,8 vezes acima da média geral do catálogo, o que indica exposição operacional significativamente elevada. A CVE mais perigosa em atividade, CVE-2019-0708, registra EPSS de 1,0, sinalizando probabilidade máxima de exploração e exigindo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente. O tipo de falha mais recorrente é CWE-59 (improper link resolution before file access, ou "link following"), sugerindo que controles de integridade de sistema de arquivos e privilégios de acesso devem compor a linha de defesa prioritária. Embora nenhuma CVE nova tenha surgido nos últimos 90 dias, o perfil histórico da plataforma — com 3 falhas críticas ativas e EPSS máximo observado de 0,99999 — reforça a necessidade de gestão contínua e rigorosa de patches.

CVEs

755 results
CVE-2019-1318—A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft WindEPSS 3.5%CVE-2020-1212—An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an EPSS 3.4%CVE-2020-1231—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 3.4%CVE-2020-1255—An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handlesEPSS 3.4%CVE-2019-0683—An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trustEPSS 3.4%CVE-2020-1294—An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiEPSS 3.3%CVE-2020-1233—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 3.3%CVE-2020-1282—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 3.3%CVE-2020-1304—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 3.3%CVE-2019-1398—A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usEPSS 3.2%CVE-2020-1241—A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilitEPSS 3.2%CVE-2020-1237—An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oEPSS 3.2%CVE-2020-1292—An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aEPSS 3.2%CVE-2020-1259—A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'WindowEPSS 3.1%CVE-2020-1311—An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model EPSS 3.1%CVE-2020-1305—An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows EPSS 3.1%CVE-2019-1424—A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon SecurEPSS 3.1%CVE-2019-1344—An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows CodEPSS 3.1%CVE-2019-1345—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationEPSS 3.0%CVE-2020-1211—An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecEPSS 3.0%