Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-49739HIGHVisual Studio Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-59249HIGHMicrosoft Exchange Server Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0919—An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, akaEPSS 0.8%CVE-2020-17137HIGHDirectX Graphics Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-1088—An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoEPSS 0.8%CVE-2020-0944—An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaEPSS 0.8%CVE-2022-30162MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.8%CVE-2025-21274MEDIUMWindows Event Tracing Denial of Service VulnerabilityEPSS 0.8%CVE-2022-35831MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-26786HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2021-36956MEDIUMAzure Sphere Information Disclosure VulnerabilityEPSS 0.8%CVE-2022-44667HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-0936—An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled TaEPSS 0.8%CVE-2022-44668HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-44687HIGHRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.8%CVE-2021-43227MEDIUMStorage Spaces Controller Information Disclosure VulnerabilityEPSS 0.8%CVE-2021-43243MEDIUMVP9 Video Extensions Information Disclosure VulnerabilityEPSS 0.8%CVE-2021-43235MEDIUMStorage Spaces Controller Information Disclosure VulnerabilityEPSS 0.8%CVE-2021-28317MEDIUMMicrosoft Windows Codecs Library Information Disclosure VulnerabilityEPSS 0.8%CVE-2020-0942—An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaEPSS 0.8%