Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2022-34685MEDIUMAzure RTOS GUIX Studio Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-1596MEDIUMTLS Information Disclosure VulnerabilityEPSS 0.9%CVE-2025-53720HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-34686MEDIUMAzure RTOS GUIX Studio Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-42301LOWAzure RTOS Information Disclosure VulnerabilityEPSS 0.9%CVE-2019-1161—Microsoft Defender Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-24455HIGHWindows CD-ROM Driver Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-0940—An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushEPSS 0.9%CVE-2020-1017—An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushEPSS 0.9%CVE-2020-0996—An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateEPSS 0.9%CVE-2020-0958—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 0.9%CVE-2024-30004MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-0913—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 0.9%CVE-2020-0888—An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerEPSS 0.9%CVE-2020-0956—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 0.9%CVE-2020-0835—An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows DefendEPSS 0.9%CVE-2020-1001—An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushEPSS 0.9%CVE-2020-1004—An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiEPSS 0.9%CVE-2020-1094—An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoEPSS 0.9%CVE-2020-1006—An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushEPSS 0.9%