Vulnerabilidades em microsoft
10.811 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2026-73299CRITICALPrompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks RendererEPSS 1.8%CVE-2018-8253—An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft CoEPSS 1.8%CVE-2021-34451MEDIUMMicrosoft Office Online Server Spoofing VulnerabilityEPSS 1.8%CVE-2023-36438HIGHWindows TCP/IP Information Disclosure VulnerabilityEPSS 1.8%CVE-2023-38151HIGHMicrosoft Host Integration Server 2020 Remote Code Execution VulnerabilityEPSS 1.8%CVE-2019-1129HIGHAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows ElEPSS 1.8%KEVCVE-2024-38019HIGHMicrosoft Windows Performance Data Helper Library Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-43458HIGHWindows Networking Information Disclosure VulnerabilityEPSS 1.8%CVE-2018-8140—An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "CEPSS 1.8%CVE-2023-32084HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.8%CVE-2019-1436—An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisEPSS 1.8%CVE-2023-35298HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.8%CVE-2024-29045HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2019-0742—A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team FounEPSS 1.8%CVE-2019-0743—A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team FounEPSS 1.8%CVE-2020-1205MEDIUMMicrosoft SharePoint Spoofing VulnerabilityEPSS 1.8%CVE-2025-29813CRITICALAzure DevOps Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2024-21360HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21358HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21365HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%