Vulnerabilidades en microsoft

9326 resultados
Análisis Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2026-47640MEDIUMMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 0.5%CVE-2023-35341MEDIUMMicrosoft DirectMusic Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-21524HIGHAzure Data Explorer Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-53736MEDIUMMicrosoft Word Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-62208MEDIUMWindows License Manager Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-62209MEDIUMWindows License Manager Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-42827MEDIUMM365 Copilot Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-58546MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-21521HIGHWord Copilot Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-49025MEDIUMMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityEPSS 0.5%CVE-2022-41114HIGHWindows Bind Filter Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-50340HIGHWindows Runtime Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-35332MEDIUMWindows Remote Desktop Protocol Security Feature BypassEPSS 0.5%CVE-2026-50505HIGHWindows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-33074HIGHAzure Functions Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-35347HIGHMicrosoft Install Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-57205MEDIUMSimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpointsEPSS 0.5%CVE-2022-24486HIGHWindows Kerberos Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-48584CRITICALMicrosoft Azure Synapse Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-47288HIGHWindows Kerberos Key Distribution Center (KDC) Remote Code ExecutionEPSS 0.5%