Vulnerabilities in microsoft

9,330 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2026-45593HIGHWindows SDK Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42910HIGHWindows Hotpatch Monitoring Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-26153HIGHWindows Encrypted File System (EFS) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-45638HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42983HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-27924HIGHDesktop Window Manager Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-45605HIGHWindows Bluetooth Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-32156HIGHWindows UPnP Device Host Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-45592HIGHWindows Internet (wininet.dll) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42891MEDIUMMicrosoft Edge (Chromium-based) for Android Spoofing VulnerabilityEPSS 0.3%CVE-2026-32204HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-50381MEDIUMComposite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-42896HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-50697HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-54122HIGHWindows GDI+ Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-58278MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.3%CVE-2025-49665HIGHWorkspace Broker Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-29973HIGHMicrosoft Azure File Sync Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-58618HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-35199MEDIUMSymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncationEPSS 0.3%