Vulnerabilidades em microsoft

10.822 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-33056HIGHWindows Local Security Authority (LSA) Denial of Service VulnerabilityEPSS 1.7%CVE-2024-21375HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.7%CVE-2019-0778—A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesEPSS 1.7%CVE-2021-1683MEDIUMWindows Bluetooth Security Feature Bypass VulnerabilityEPSS 1.7%CVE-2020-0903MEDIUMA cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request EPSS 1.6%CVE-2019-0685—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.6%CVE-2023-33140MEDIUMMicrosoft OneNote Spoofing VulnerabilityEPSS 1.6%CVE-2023-36801MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 1.6%CVE-2020-17048MEDIUMChakra Scripting Engine Memory Corruption VulnerabilityEPSS 1.6%CVE-2019-1469—An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisEPSS 1.6%CVE-2025-21242MEDIUMWindows Kerberos Information Disclosure VulnerabilityEPSS 1.6%CVE-2024-37334HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21349HIGHMicrosoft ActiveX Data Objects Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21367HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21368HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21361HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21359HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2020-16994HIGHAzure Sphere Unsigned Code Execution VulnerabilityEPSS 1.6%CVE-2022-38031HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2022-41062HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 1.6%