Vulnerabilities in microsoft

10,808 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-29325HIGHWindows OLE Remote Code Execution VulnerabilityEPSS 84.4%CVE-2024-38112HIGHWindows MSHTML Platform Spoofing VulnerabilityEPSS 84.2%KEVCVE-2024-38077CRITICALWindows Remote Desktop Licensing Service Remote Code Execution VulnerabilityEPSS 84.1%CVE-2024-43451MEDIUMNTLM Hash Disclosure Spoofing VulnerabilityEPSS 84.1%KEVCVE-2024-30044HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 84.0%CVE-2024-49113HIGHWindows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityEPSS 83.6%CVE-2022-26923HIGHActive Directory Domain Services Elevation of Privilege VulnerabilityEPSS 83.5%KEVCVE-2021-28482HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 83.2%CVE-2019-0539—A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CEPSS 82.9%CVE-2025-33073HIGHWindows SMB Client Elevation of Privilege VulnerabilityEPSS 82.7%KEVCVE-2023-21716CRITICALMicrosoft Word Remote Code Execution VulnerabilityEPSS 82.3%CVE-2022-44690HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 82.1%CVE-2024-43468CRITICALMicrosoft Configuration Manager Remote Code Execution VulnerabilityEPSS 82.0%KEVCVE-2023-21707HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 82.0%CVE-2019-0752HIGHA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripEPSS 81.6%KEVCVE-2023-32031HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 81.5%CVE-2021-31955MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 81.1%KEVCVE-2025-21298CRITICALWindows OLE Remote Code Execution VulnerabilityEPSS 80.9%CVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 80.8%KEVCVE-2022-34715CRITICALWindows Network File System Remote Code Execution VulnerabilityEPSS 80.4%