Vulnerabilidades em microsoft

10.811 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2022-24515MEDIUMAzure Site Recovery Elevation of Privilege VulnerabilityEPSS 2.8%CVE-2023-36003MEDIUMXAML Diagnostics Elevation of Privilege VulnerabilityEPSS 2.8%CVE-2021-33758HIGHWindows Hyper-V Denial of Service VulnerabilityEPSS 2.8%CVE-2023-21744HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 2.8%CVE-2021-34499MEDIUMWindows DNS Server Denial of Service VulnerabilityEPSS 2.8%CVE-2021-33745MEDIUMWindows DNS Server Denial of Service VulnerabilityEPSS 2.8%CVE-2022-29148HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 2.8%CVE-2021-26867CRITICALWindows Hyper-V Remote Code Execution VulnerabilityEPSS 2.8%CVE-2020-0890MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 2.8%CVE-2023-36028CRITICALMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 2.8%CVE-2024-26197MEDIUMWindows Standards-Based Storage Management Service Denial of Service VulnerabilityEPSS 2.8%CVE-2025-54098HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 2.8%CVE-2019-1153MEDIUMMicrosoft Graphics Component Information Disclosure VulnerabilityEPSS 2.8%CVE-2019-1148MEDIUMMicrosoft Graphics Component Information Disclosure VulnerabilityEPSS 2.8%CVE-2022-29105HIGHMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityEPSS 2.8%CVE-2022-29141HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 2.8%CVE-2022-23265HIGHMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 2.8%CVE-2021-42293MEDIUMMicrosoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege VulnerabilityEPSS 2.8%CVE-2020-1343—An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual EPSS 2.8%CVE-2021-34453HIGHMicrosoft Exchange Server Denial of Service VulnerabilityEPSS 2.8%