Vulnerabilidades em microsoft
10.810 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2018-8434—An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authEPSS 3.5%CVE-2018-8425—A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." TEPSS 3.5%CVE-2020-17002HIGHAzure SDK for C Security Feature Bypass VulnerabilityEPSS 3.5%CVE-2021-24090HIGHWindows Error Reporting Elevation of Privilege VulnerabilityEPSS 3.5%CVE-2020-16955HIGHMicrosoft Office Click-to-Run Elevation of Privilege VulnerabilityEPSS 3.5%CVE-2023-23415CRITICALInternet Control Message Protocol (ICMP) Remote Code Execution VulnerabilityEPSS 3.5%CVE-2019-1315HIGHAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error ReportEPSS 3.5%KEVCVE-2020-0654—A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or EPSS 3.5%CVE-2021-36932HIGHWindows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityEPSS 3.5%CVE-2021-36926HIGHWindows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityEPSS 3.5%CVE-2021-36933HIGHWindows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityEPSS 3.5%CVE-2021-30621—Chromium: CVE-2021-30621 UI Spoofing in AutofillEPSS 3.5%CVE-2021-30619—Chromium: CVE-2021-30619 UI Spoofing in AutofillEPSS 3.5%CVE-2021-1679MEDIUMWindows CryptoAPI Denial of Service VulnerabilityEPSS 3.5%CVE-2021-26885HIGHWindows WalletService Elevation of Privilege VulnerabilityEPSS 3.5%CVE-2022-29112MEDIUMWindows Graphics Component Information Disclosure VulnerabilityEPSS 3.5%CVE-2020-1492—Media Foundation Memory Corruption VulnerabilityEPSS 3.5%CVE-2020-1554—Media Foundation Memory Corruption VulnerabilityEPSS 3.5%CVE-2020-17125HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 3.5%CVE-2020-17129HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 3.5%