Vulnerabilidades em microsoft

10.822 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-38184HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 1.5%CVE-2023-28275HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.5%CVE-2018-8651—A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affEPSS 1.5%CVE-2024-21401CRITICALMicrosoft Entra Jira Single-Sign-On Plugin Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2023-21703MEDIUMAzure Data Box Gateway Remote Code Execution VulnerabilityEPSS 1.5%CVE-2021-24096HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2023-24870MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2023-24906MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2019-0646—A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team FounEPSS 1.5%CVE-2019-0624—A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype forEPSS 1.5%CVE-2024-29995HIGHWindows Kerberos Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2023-24922MEDIUMMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 1.5%CVE-2023-24863MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2023-24857MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2023-24883MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2020-1289—A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SEPSS 1.5%CVE-2023-33143HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2024-43453HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.5%CVE-2020-16901MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 1.5%CVE-2020-0716—An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisEPSS 1.5%