Vulnerabilities in microsoft

9,329 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-53732HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-29346HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-55047MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.5%CVE-2022-37986HIGHWindows Win32k Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2021-40454MEDIUMRich Text Edit Control Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-50173HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-20944HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2021-34456HIGHWindows Remote Access Connection Manager Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-20811HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-48808MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-49667HIGHWindows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-28272HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-20675MEDIUMMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-49722MEDIUMWindows Print Spooler Denial of Service VulnerabilityEPSS 0.5%CVE-2023-32053HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-28923MEDIUMSecure Boot Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2026-20938HIGHWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-35425HIGHAzure API Management (APIM) Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-59204MEDIUMWindows Management Services Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-21304MEDIUMTrusted Compute Base Elevation of Privilege VulnerabilityEPSS 0.5%