Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-26232HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-37988HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-38017MEDIUMMicrosoft Message Queuing Information Disclosure VulnerabilityEPSS 0.9%CVE-2022-37991HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-38176HIGHGroupMe Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-24903HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-38219MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-1123—A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnEPSS 0.9%CVE-2020-1076—A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 0.9%CVE-2025-49752CRITICALAzure Bastion Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-16876HIGHWindows Application Compatibility Client Library Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2021-26441HIGHStorage Spaces Controller Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-0641—An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnEPSS 0.9%CVE-2020-0783—An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory,EPSS 0.9%CVE-2020-0781—An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory,EPSS 0.9%CVE-2023-29344HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-41104CRITICALMicrosoft Planetary Computer Pro Information Disclosure VulnerabilityEPSS 0.9%CVE-2025-30399HIGH.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-36591HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-1333—An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group PolEPSS 0.9%