Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-28917MEDIUMAzure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2021-24106MEDIUMWindows DirectX Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-24079MEDIUMWindows Backup Engine Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-1729HIGHWindows Update Stack Setup Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-21564HIGHAzure DevOps Server Cross-Site Scripting VulnerabilityEPSS 0.9%CVE-2024-20694MEDIUMWindows CoreMessaging Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-38633HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-50497MEDIUMWindows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-58535MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-58533MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-17070HIGHWindows Update Medic Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-25173HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-17073HIGHWindows Update Orchestrator Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2019-1026HIGHWindows Audio Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2019-1027HIGHWindows Audio Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-38182CRITICALMicrosoft Dynamics 365 Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-21795HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-30075HIGHWindows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-20824MEDIUMWindows Remote Assistance Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2019-1028HIGHWindows Audio Service Elevation of Privilege VulnerabilityEPSS 0.9%