Vulnerabilidades em microsoft
10.822 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2023-35352HIGHWindows Remote Desktop Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2019-1171MEDIUMSymCrypt Information Disclosure VulnerabilityEPSS 1.4%CVE-2021-41335HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2025-55227HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2020-0943—An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes EPSS 1.4%CVE-2023-36004HIGHWindows DPAPI (Data Protection Application Programming Interface) Spoofing VulnerabilityEPSS 1.4%CVE-2026-20847MEDIUMMicrosoft Windows File Explorer Spoofing VulnerabilityEPSS 1.4%CVE-2021-31188HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2020-0671—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 1.4%CVE-2020-0670—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 1.4%CVE-2020-0672—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 1.4%CVE-2021-27075MEDIUMAzure Virtual Machine Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-50166MEDIUMWindows Distributed Transaction Coordinator (MSDTC) Information Disclosure VulnerabilityEPSS 1.4%CVE-2021-31204HIGH.NET and Visual Studio Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2020-0794—A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 1.4%CVE-2020-0982—An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrEPSS 1.4%CVE-2021-38639HIGHWin32k Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2024-37980HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.4%CVE-2020-1005—An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrEPSS 1.4%CVE-2018-8435—A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-VEPSS 1.4%