Vulnerabilities in microsoft

9,329 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-55337MEDIUMWindows BitLocker Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-59204MEDIUMWindows Management Services Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-21304MEDIUMTrusted Compute Base Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-20852HIGHWindows Hello Tampering VulnerabilityEPSS 0.5%CVE-2026-20833MEDIUMWindows Kerberos Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-60707HIGHMultimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-59227HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-21726HIGHWindows Credential Manager User Interface Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-21402HIGHMicrosoft Outlook Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-55229MEDIUMWindows Certificate Spoofing VulnerabilityEPSS 0.5%CVE-2026-58596HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-38157HIGHAzure IoT SDK Remote Code Execution VulnerabilityEPSS 0.5%CVE-2021-28460HIGHAzure Sphere Unsigned Code Execution VulnerabilityEPSS 0.5%CVE-2025-50176HIGHDirectX Graphics Kernel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-56171HIGHWindows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityEPSS 0.5%CVE-2021-42322HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-57985HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-33117CRITICALAzure SDK for Java Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-21338HIGHGDI+ Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-55231HIGHWindows Storage-based Management Service Remote Code Execution VulnerabilityEPSS 0.5%