Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2020-1135—An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiEPSS 0.8%CVE-2026-21257HIGHGitHub Copilot and Visual Studio Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-1590MEDIUMConnected User Experiences and Telemetry Service Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-54113HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-25006MEDIUMMicrosoft Exchange Server Spoofing VulnerabilityEPSS 0.8%CVE-2022-21978HIGHMicrosoft Exchange Server Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-54917MEDIUMMapUrlToZone Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-41094HIGHMicrosoft Data Formulator Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-21532HIGHAzure Function Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-35779HIGHAzure RTOS GUIX Studio Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-20693HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-30065MEDIUMWindows Themes Denial of Service VulnerabilityEPSS 0.8%CVE-2023-33146HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-42826CRITICALAzure DevOps Information Disclosure VulnerabilityEPSS 0.8%CVE-2025-29806MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-33819CRITICALMicrosoft Bing Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-43476HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 0.8%CVE-2024-38186HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-47988HIGHAzure Monitor Agent Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-0762—An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerEPSS 0.8%