Vulnerabilidades en microsoft
9364 resultadosAnálisis Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2020-1472MEDIUMNetlogon Elevation of Privilege VulnerabilityEPSS 99.5%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2020-0646CRITICALA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote EPSS 99.2%KEVCVE-2020-0618CRITICALA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'MicrEPSS 99.0%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 98.9%KEVCVE-2024-29059HIGH.NET Framework Information Disclosure VulnerabilityEPSS 98.6%KEVCVE-2021-33766HIGHMicrosoft Exchange Server Information Disclosure VulnerabilityEPSS 97.5%KEVCVE-2023-23397CRITICALMicrosoft Outlook Elevation of Privilege VulnerabilityEPSS 97.4%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.2%KEVCVE-2023-21554CRITICALMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 95.5%CVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 95.4%KEVCVE-2023-24941CRITICALWindows Network File System Remote Code Execution VulnerabilityEPSS 94.7%CVE-2024-21413CRITICALMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 94.7%KEVCVE-2021-26857HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 94.0%KEVCVE-2020-1147HIGHA remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check theEPSS 94.0%KEVCVE-2021-41349MEDIUMMicrosoft Exchange Server Spoofing VulnerabilityEPSS 93.9%CVE-2023-28302HIGHMicrosoft Message Queuing (MSMQ) Denial of Service VulnerabilityEPSS 93.6%CVE-2023-35628HIGHWindows MSHTML Platform Remote Code Execution VulnerabilityEPSS 92.8%CVE-2022-21907CRITICALHTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 92.8%CVE-2023-21758HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 92.5%