Vulnerabilities in microsoft

9,312 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-26252MEDIUMWindows rndismp6.sys Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-53799MEDIUMWindows Imaging Component Information Disclosure VulnerabilityEPSS 0.7%CVE-2023-28248HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-30213MEDIUMWindows GDI+ Information Disclosure VulnerabilityEPSS 0.7%CVE-2025-55242MEDIUMXbox Certification Bug Copilot Djando Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-38133HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-26253MEDIUMWindows rndismp6.sys Remote Code Execution VulnerabilityEPSS 0.7%CVE-2020-1423—An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for LinEPSS 0.7%CVE-2020-1077—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 0.7%CVE-2023-21794MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.7%CVE-2021-36928MEDIUMMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-21228HIGHAzure Local Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-24882MEDIUMMicrosoft OneDrive for Android Information Disclosure VulnerabilityEPSS 0.7%CVE-2019-1289—An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissionEPSS 0.7%CVE-2021-41376LOWAzure Sphere Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-30222HIGHWindows Shell Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-36867HIGHVisual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-59285HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2020-0896—An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulEPSS 0.7%CVE-2024-20665MEDIUMBitLocker Security Feature Bypass VulnerabilityEPSS 0.7%