Vulnerabilidades em microsoft

10.811 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-29348HIGHWindows Remote Desktop Gateway (RD Gateway) Information Disclosure VulnerabilityEPSS 2.0%CVE-2018-8417—A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScrEPSS 2.0%CVE-2020-1141MEDIUMWindows GDI Information Disclosure VulnerabilityEPSS 2.0%CVE-2020-1145MEDIUMWindows GDI Information Disclosure VulnerabilityEPSS 2.0%CVE-2020-1096MEDIUMMicrosoft Edge PDF Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-31938HIGHMicrosoft VsCode Kubernetes Tools Extension Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2023-36012MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 2.0%CVE-2024-20664MEDIUMMicrosoft Message Queuing Information Disclosure VulnerabilityEPSS 2.0%CVE-2019-0558MEDIUMA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesEPSS 2.0%CVE-2021-33746HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 2.0%CVE-2025-24984MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 2.0%KEVCVE-2022-44693HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 2.0%CVE-2022-24472HIGHMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 2.0%CVE-2025-47733CRITICALMicrosoft Power Apps Information Disclosure VulnerabilityEPSS 2.0%CVE-2024-29993HIGHAzure CycleCloud Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2021-42310HIGHMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 2.0%CVE-2022-35802HIGHAzure Site Recovery Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2026-58289CRITICALMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 2.0%CVE-2023-36423HIGHMicrosoft Remote Registry Service Remote Code Execution VulnerabilityEPSS 2.0%CVE-2019-1091—An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll InfEPSS 2.0%