Vulnerabilidades em microsoft
10.829 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2022-35752HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-35745HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-1358—An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerabEPSS 1.2%CVE-2023-36793HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-36792HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-36794HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-36796HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-1420—An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerabilityEPSS 1.2%CVE-2021-31978MEDIUMMicrosoft Defender Denial of Service VulnerabilityEPSS 1.2%CVE-2020-1391—An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memoryEPSS 1.2%CVE-2020-1389—An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel InEPSS 1.2%CVE-2020-1426—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationEPSS 1.2%CVE-2020-1386—An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, akaEPSS 1.2%CVE-2020-1367—An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationEPSS 1.2%CVE-2020-1330—An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiEPSS 1.2%CVE-2023-35350HIGHWindows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2018-8124—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k EPSS 1.2%CVE-2019-1303—An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerabEPSS 1.2%CVE-2025-53728MEDIUMMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-9611HIGHMicrosoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header ValidationEPSS 1.2%