Vulnerabilidades em microsoft
10.811 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-30070HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 2.3%CVE-2024-43575HIGHWindows Hyper-V Denial of Service VulnerabilityEPSS 2.3%CVE-2025-62454HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 2.3%CVE-2019-1400—An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, akEPSS 2.3%CVE-2024-43567HIGHWindows Hyper-V Denial of Service VulnerabilityEPSS 2.3%CVE-2021-40474HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-37981MEDIUMWindows Event Logging Service Denial of Service VulnerabilityEPSS 2.3%CVE-2024-38232HIGHWindows Networking Denial of Service VulnerabilityEPSS 2.3%CVE-2024-20670HIGHOutlook for Windows Spoofing VulnerabilityEPSS 2.3%CVE-2021-26437MEDIUMVisual Studio Code Spoofing VulnerabilityEPSS 2.3%CVE-2022-24522MEDIUMSkype Extension for Chrome Information Disclosure VulnerabilityEPSS 2.3%CVE-2025-21391HIGHWindows Storage Elevation of Privilege VulnerabilityEPSS 2.3%KEVCVE-2021-40473HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-40479HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-40471HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-38236HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 2.3%CVE-2022-33649CRITICALMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 2.3%CVE-2021-42279MEDIUMChakra Scripting Engine Memory Corruption VulnerabilityEPSS 2.3%CVE-2018-8600—A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, akaEPSS 2.3%CVE-2022-23294HIGHWindows Event Tracing Remote Code Execution VulnerabilityEPSS 2.3%