Vulnerabilidades em microsoft

10.822 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-29958MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.3%CVE-2026-59864CRITICALKiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensionsEPSS 1.3%CVE-2026-23666HIGH.NET Framework Denial of Service VulnerabilityEPSS 1.3%CVE-2020-1505MEDIUMMicrosoft SharePoint Information Disclosure VulnerabilityEPSS 1.3%CVE-2020-1075MEDIUMWindows Subsystem for Linux Information Disclosure VulnerabilityEPSS 1.3%CVE-2023-29355MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 1.3%CVE-2025-30384HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 1.3%CVE-2024-38165MEDIUMWindows Compressed Folder Tampering VulnerabilityEPSS 1.3%CVE-2020-0700—A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOpsEPSS 1.3%CVE-2021-43220LOWMicrosoft Edge for iOS Spoofing VulnerabilityEPSS 1.3%CVE-2021-42308LOWMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 1.3%CVE-2019-1254—An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information DiEPSS 1.3%CVE-2024-20690MEDIUMWindows Nearby Sharing Spoofing VulnerabilityEPSS 1.3%CVE-2023-36564MEDIUMWindows Search Security Feature Bypass VulnerabilityEPSS 1.3%CVE-2021-36975HIGHWin32k Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2024-0590MEDIUMMicrosoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 1.3%CVE-2024-38131HIGHClipboard Virtual Channel Extension Remote Code Execution VulnerabilityEPSS 1.3%CVE-2021-28461MEDIUMDynamics Finance and Operations Cross-site Scripting VulnerabilityEPSS 1.3%CVE-2019-1391—A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. TEPSS 1.3%CVE-2020-1424—An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateEPSS 1.3%