Vulnerabilidades em microsoft

10.822 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2020-16992HIGHAzure Sphere Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2024-49124HIGHLightweight Directory Access Protocol (LDAP) Client Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21303HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21252HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.4%CVE-2024-43598HIGHLightGBM Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21305HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21302HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-21306HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.4%CVE-2026-59866CRITICALKiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceNameEPSS 1.4%CVE-2024-43581HIGHMicrosoft OpenSSH for Windows Remote Code Execution VulnerabilityEPSS 1.4%CVE-2024-43608HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2024-43607HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2024-43549HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2018-8204—A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheEPSS 1.4%CVE-2024-43564HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2018-8200—A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheEPSS 1.4%CVE-2021-26421MEDIUMSkype for Business and Lync Spoofing VulnerabilityEPSS 1.4%CVE-2025-29960MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-29959MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2026-20868HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%