Vulnerabilidades em microsoft

10.811 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2022-23254MEDIUMMicrosoft Power BI Information Disclosure VulnerabilityEPSS 2.6%CVE-2024-35264HIGH.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 2.6%CVE-2023-36780HIGHSkype for Business Remote Code Execution VulnerabilityEPSS 2.6%CVE-2018-8348—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationEPSS 2.6%CVE-2022-30209HIGHWindows IIS Server Elevation of Privilege VulnerabilityEPSS 2.6%CVE-2018-8326—A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FEPSS 2.6%CVE-2019-0992MEDIUMChakra Scripting Engine Memory Corruption VulnerabilityEPSS 2.6%CVE-2018-8207—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationEPSS 2.6%CVE-2022-30171MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 2.6%CVE-2025-54101MEDIUMWindows SMB Client Remote Code Execution VulnerabilityEPSS 2.6%CVE-2021-31958HIGHWindows NTLM Elevation of Privilege VulnerabilityEPSS 2.6%CVE-2024-30038HIGHWin32k Elevation of Privilege VulnerabilityEPSS 2.6%CVE-2022-23272HIGHMicrosoft Dynamics GP Elevation Of Privilege VulnerabilityEPSS 2.5%CVE-2022-24508HIGHWin32 File Enumeration Remote Code Execution VulnerabilityEPSS 2.5%CVE-2021-27055HIGHMicrosoft Visio Security Feature Bypass VulnerabilityEPSS 2.5%CVE-2022-21888HIGHWindows Modern Execution Server Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-21970MEDIUMMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 2.5%CVE-2024-49064MEDIUMMicrosoft SharePoint Information Disclosure VulnerabilityEPSS 2.5%CVE-2018-8330—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationEPSS 2.5%CVE-2019-0552—An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects WindowsEPSS 2.5%