Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2020-1526HIGHWindows Network Connection Broker Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0739—An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creationEPSS 0.8%CVE-2020-1542HIGHWindows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-1275—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 0.8%CVE-2020-1388—An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of PrivilegeEPSS 0.8%CVE-2026-42914MEDIUMWindows Kerberos Denial of Service VulnerabilityEPSS 0.8%CVE-2024-41145HIGHA library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. AEPSS 0.8%CVE-2026-49181HIGHWindows DHCP Client Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-27742MEDIUMNTFS Information Disclosure VulnerabilityEPSS 0.8%CVE-2020-0900—An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'VEPSS 0.8%CVE-2024-30008MEDIUMWindows DWM Core Library Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-24546HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-30131HIGHWindows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0899—An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'MicrosEPSS 0.8%CVE-2022-26914HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-1488HIGHWindows AppX Deployment Extensions Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2021-28350HIGHWindows GDI+ Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-1430—An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, anEPSS 0.8%CVE-2020-1354—An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, anEPSS 0.8%CVE-2026-21523HIGHGitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%