Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2020-16936HIGHWindows Backup Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1243HIGHWindows Hyper-V Denial of Service VulnerabilityEPSS 0.9%CVE-2024-30073HIGHWindows Security Zone Mapping Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2024-41138HIGHA library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.281EPSS 0.9%CVE-2021-41361MEDIUMActive Directory Federation Server Spoofing VulnerabilityEPSS 0.9%CVE-2021-41354MEDIUMMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.9%CVE-2020-1253—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 0.9%CVE-2021-41353MEDIUMMicrosoft Dynamics 365 (on-premises) Spoofing VulnerabilityEPSS 0.9%CVE-2023-28232HIGHWindows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-0730—An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows UseEPSS 0.9%CVE-2025-62206MEDIUMMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-16941MEDIUMMicrosoft SharePoint Information Disclosure VulnerabilityEPSS 0.9%CVE-2024-38172HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-17032HIGHWindows Remote Access Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-17033HIGHWindows Remote Access Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-17025HIGHWindows Remote Access Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2019-1270—An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack,EPSS 0.9%CVE-2020-17028HIGHWindows Remote Access Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-26201MEDIUMMicrosoft Intune Linux Agent Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-21379HIGHDHCP Client Service Remote Code Execution VulnerabilityEPSS 0.9%