Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-30072HIGHMicrosoft Event Trace Log File Parsing Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-43470HIGHAzure Network Watcher VM Agent Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-35629MEDIUMMicrosoft USBHUB 3.0 Device Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-29802HIGHVisual Studio Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1251—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 0.9%CVE-2024-26193MEDIUMAzure Migrate Remote Code Execution VulnerabilityEPSS 0.9%CVE-2019-0931—An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service EleEPSS 0.9%CVE-2020-1109—An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateEPSS 0.9%CVE-2020-1402—An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerabEPSS 0.9%CVE-2023-28305MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-28306MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-28307MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-0799—An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbEPSS 0.9%CVE-2023-28308MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-28278MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-31970MEDIUMWindows TCP/IP Driver Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2023-36030MEDIUMMicrosoft Dynamics 365 Sales Spoofing VulnerabilityEPSS 0.9%CVE-2026-58626HIGHWindows Remote Desktop Services Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-49670MEDIUMWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-1695HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.9%