Vulnerabilidades em microsoft

10.811 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2022-41115MEDIUMMicrosoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2023-36437HIGHAzure DevOps Server Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-34517MEDIUMMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 1.9%CVE-2022-34714HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 1.9%CVE-2025-21217MEDIUMWindows NTLM Spoofing VulnerabilityEPSS 1.9%CVE-2024-26161HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-21444HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-21451HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-21441HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-26159HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.9%CVE-2025-49683HIGHMicrosoft Virtual Hard Disk Remote Code Execution VulnerabilityEPSS 1.9%CVE-2021-31984HIGHPower BI Remote Code Execution VulnerabilityEPSS 1.9%CVE-2020-1044MEDIUMSQL Server Reporting Services Security Feature Bypass VulnerabilityEPSS 1.9%CVE-2019-1198MEDIUMMicrosoft Windows Elevation of Privilege VulnerabilityEPSS 1.9%CVE-2023-32014CRITICALWindows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityEPSS 1.9%CVE-2023-29363CRITICALWindows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityEPSS 1.9%CVE-2022-37977MEDIUMLocal Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityEPSS 1.9%CVE-2018-8201—A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheEPSS 1.9%CVE-2025-21389HIGHWindows Universal Plug and Play (UPnP) Device Host Denial of Service VulnerabilityEPSS 1.9%CVE-2022-29143HIGHMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 1.9%